What’s Vulnerable › Vulnerabilities

CVE-2022-21817

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-02 · updated 2026-06-17

Description

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

Affected products

• NVIDIA Omniverse Workstation Launcher: before 1.5.2 — fixed in 1.5.2

How to fix

Upgrade to a fixed version: NVIDIA Omniverse Workstation Launcher 1.5.2. Check the vendor advisory for mitigations.

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5318
• https://nvidia.custhelp.com/app/answers/detail/a_id/5318

Get alerted when CVE-2022-21817 or the next vulnerability affects your stack