CVE-2024-0132

This PoC exploits a TOCTOU vulnerability in NVIDIA Container Toolkit 1.16.1 or earlier, allowing container breakout and host filesystem access via crafted symlinks in a Docker image. The exploit leverages directory traversal to expose host files within the container.

This PoC exploits a TOCTOU (Time-of-Check to Time-of-Use) vulnerability in the NVIDIA container toolkit by manipulating symbolic links in `/usr/local/cuda/compat/` to achieve path traversal and mount the host filesystem. The Dockerfile demonstrates the exploit by creating a malicious container image that bypasses path resolution checks.

This repository contains a functional exploit PoC for CVE-2024-0132, targeting NVIDIA container toolkit to achieve container escape via symlink manipulation and Docker socket access. The exploit demonstrates host file access and Docker API interaction from within a container.