CVE-2026-24260 is a CWE-367 TOCTOU race condition vulnerability in the NVIDIA Container Toolkit for Linux. The flaw arises from a timing issue between checking a condition and using the resource, which an attacker could exploit to perform unauthorized code execution, privilege escalation, and data tampering. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could lead to remote code execution, escalation of privileges from low privilege to higher privilege levels, and unauthorized modification of data within the affected system. This could compromise system integrity and confidentiality, potentially allowing attackers to control or disrupt containerized environments using the NVIDIA Container Toolkit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor NVIDIA's security advisories for updates. Applying strict access controls and minimizing exposure of the NVIDIA Container Toolkit to untrusted users may reduce risk.