NVIDIA Isaac Launchable: Execution with unnecessary privileges lets an unauthenticated network attacker reach code

Impact

Execution with unnecessary privileges lets an unauthenticated network attacker reach code execution, privilege escalation, information disclosure and data tampering. Scored 9.8.

Who can reach it

Network, unauthenticated, no user interaction.

What to do

Update to the fixed release per bulletin 5749 and redeploy. Cost: redeploy only, but review what privileges the workload actually needs - the underlying pattern is over-privileged execution, which recurs.

References