2024-09-25 · 2024-Q3

NVIDIA Container Toolkit Vulnerability

Primary layerL6 Identity / RunSecondary:L5 Config

Which agent, run, or tenant is this?
The question layer 6 asks, and failed here.

Fixable: Vendor patch
Vendor response: Patched
In the wild: No
Actor: Attacker

Target

NVIDIA Container Toolkit (35%+ of cloud GPU environments)

Impact

Container escape, host filesystem access, privilege escalation, manipulation of GPU workloads

Root cause

Time-of-check Time-of-Use (TOCTOU) flaw

CVE

CVE-2024-0132

Sources

Catalog

View this entry in the catalog

Cite this: AgentProv incident record: NVIDIA Container Toolkit Vulnerability (2024-09-25). https://agentprov.com/incidents/2024-09-25-nvidia-container-toolkit-vulnerability

Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run