CVE-2026-24212 is a high severity (CVSS 7.5) flaw in NVIDIA Isaac Launchable for Linux, where sensitive information is sent in clear text. All versions before 1.2 are affected, and 1.2 fixes it. Update to 1.2 or later, and keep the deployment on an isolated network until you do.
What's affected
NVIDIA's May 2026 Isaac Launchable bulletin lists all versions before 1.2 on Linux as affected, with 1.2 as the updated version. NVIDIA credits an outside researcher for the report.
The CVSS vector is adjacent network, high complexity, no privileges and no user interaction. Adjacent means the attacker has to be on the same local network segment as the target, which narrows exposure to shared networks.
How to check if you're exposed
Check which Isaac Launchable version each deployment runs. Look at the release or image tag you launched from, and compare it with 1.2.
Then think about where it runs. A deployment on a shared office, lab or cloud network segment has more exposure than one on an isolated segment, because the attack needs adjacency.
What to do now
- Update Isaac Launchable to 1.2 or later.
- Until you have updated, run it on an isolated network segment, not a shared one.
- Treat credentials and tokens used with the old version as exposed if it ran on a shared segment, and rotate them.
- Record where Launchable instances exist so the next bulletin is easier to act on.
Why it matters
The weakness is CWE-319, cleartext transmission of sensitive information. Data sent without encryption can be read, and sometimes changed, by anyone positioned on the network path. NVIDIA lists code execution, privilege escalation, information disclosure and data tampering as possible impacts.
The adjacent network requirement is a real limit, and the high complexity rating means it is not trivial. Shared development networks are exactly where it still matters. It is not listed as exploited in CISA's catalog.
Quick check
Does the attacker need to be on the internet side?
No. The vector is adjacent network, so the attacker must share a network segment with the target.
What fixes it?
Isaac Launchable 1.2, according to NVIDIA's bulletin.
Sources
Last reviewed: 19 October 2026.
