{"affected":[{"product":"NovumOS","source":"CNA: GitHub_M","vendor":"MinecAnton209","versions":[{"status":"affected","version":"< 0.25-beta.1"}]},{"ecosystem":"zig","packageName":"MinecAnton209/NovumOS","product":"MinecAnton209/NovumOS","source":"GitHub GHSA-rq9v-wxp3-ffrr","vendor":"","versions":[{"status":"affected","version":"<=0.23","versionType":"GitHub advisory range"}]}],"cveId":"CVE-2026-40573","cwes":["CWE-250"],"description":"NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious `.nv` script through the shell permits a local user to execute code with kernel privileges without security checks. The advisory identifies VM initialization in `zig/nova/vm.zig` as the affected component; script execution is not isolated in a restricted Ring 3 privilege domain. This issue is fixed in version 0.25-beta.1.","epss":{"date":"2026-11-04","percentile":0.02571,"score":0.00129},"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"}],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},{"score":8.6,"severity":"high","source":"NVD: security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793846782700,"publishedAt":1793392273209,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/MinecAnton209/NovumOS/commit/ca3e7a6b4bcdcac23413d39ecf863b94e6a3a207"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/MinecAnton209/NovumOS/tree/v0.25-beta.1"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/MinecAnton209/NovumOS/commit/ca3e7a6b4bcdcac23413d39ecf863b94e6a3a207"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/MinecAnton209/NovumOS/tree/v0.25-beta.1"},{"source":"GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"}],"remediation":[{"kind":"fix","source":"GitHub GHSA-rq9v-wxp3-ffrr","text":"MinecAnton209/NovumOS (zig): GitHub reports patched versions >=0.25-beta.1. Check the advisory for the affected release branch.","url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"}],"revision":"9fac8b0c79314f8606fbbe8085344da743bc1a8c3e8c90bc73a026c6b9a6efb0","sources":[{"modifiedAt":1793846782700,"name":"CNA: GitHub_M","retrievedAt":1793848209469,"url":"https://www.cve.org/CVERecord?id=CVE-2026-40573"},{"modifiedAt":1793648133347,"name":"NVD","retrievedAt":1793665690234,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40573"},{"modifiedAt":1782555763000,"name":"GitHub Security Advisories","retrievedAt":1793850609739,"url":"https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793848266846,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-40573"}],"ssvc":{"assessedAt":1793846757465,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"NovumOS: Nova Interpreter Privilege Escalation","updatedAt":1793850609739}