CVE-2026-40573 Details
Description
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious `.nv` script through the shell permits a local user to execute code with kernel privileges without security checks. The advisory identifies VM initialization in `zig/nova/vm.zig` as the affected component; script execution is not isolated in a restricted Ring 3 privilege domain. This issue is fixed in version 0.25-beta.1.
A privilege escalation vulnerability has been identified in NovumOS versions prior to 0.25-beta.1. The issue arises because the Nova interpreter executes in Ring 0 with unrestricted access to kernel memory. This flaw allows local users to run malicious Nova scripts that execute with kernel privileges, bypassing security checks. The vulnerability is rooted in the lack of isolation for script execution, which is not confined to a restricted Ring 3 privilege domain.
Users can upgrade to NovumOS version 0.25-beta.1 or later, where this vulnerability has been patched. Instructions for downloading the latest version are available on the NovumOS GitHub repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/MinecAnton209/NovumOS/commit/ca3e7a6b4bcdcac23413d39ecf863b94e6a3a207 | [email protected] | Source CodeVendor |
| https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr | [email protected] | AdvisoryExploitRemedyVendor |
| https://github.com/MinecAnton209/NovumOS/tree/v0.25-beta.1 | [email protected] | Source CodeVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-250 | Execution with Unnecessary Privileges | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MinecAnton209 NovumOS | <= 0.23 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 30, 2026 | New CVE Received | [email protected] |