The NVIDIA Infrastructure Controller for Linux contains a CWE-73 vulnerability involving external control of file names or paths. This flaw could be exploited by an attacker with high privileges and network access to cause unauthorized code execution, escalate privileges, tamper with data, or cause denial of service. The CVSS vector indicates that the attack requires high complexity and privileges but no user interaction. No vendor advisory or patch information is currently available.

Successful exploitation may result in code execution, escalation of privileges, data tampering, and denial of service on affected systems running the NVIDIA Infrastructure Controller for Linux. The vulnerability requires an attacker with high privileges and network access, limiting the attack surface. The impact affects confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the NVIDIA Infrastructure Controller and monitor for suspicious activity related to file path manipulation. Follow NVIDIA's official channels for updates on patches or mitigations.