-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe security patch adds critical path validation through assertPathInRoot and converts warning logs to fatal errors. The vulnerable version's createLink function: 1) Only performed basic path splitting without symlink resolution validation 2) Continued processing after errors via logger.Warningf 3) Lacked container root boundary checks before symlink creation. These missing checks in createLink allowed attackers to exploit TOCTOU race conditions by changing paths after initial validation but before symlink creation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/NVIDIA/nvidia-container-toolkit | go | < 1.16.2 | 1.16.2 |