diff --git a/pkg/sentry/devices/nvproxy/nvconf/caps.go b/pkg/sentry/devices/nvproxy/nvconf/caps.go
index ec9a754ca33..e4046191ea8 100644
--- a/pkg/sentry/devices/nvproxy/nvconf/caps.go
+++ b/pkg/sentry/devices/nvproxy/nvconf/caps.go
@@ -62,7 +62,7 @@ const (
 	// enabled when enabling "all" capabilities is requested, which excludes
 	// "privileged" capabilities that are usually not intended. Similar to
 	// nvidia-container-toolkit/internal/config/image/capabilities.go:SupportedDriverCapabilities.
-	AllContainerDriverCaps = CapCompute | CapUtility | CapGraphics | CapVideo
+	AllContainerDriverCaps = CapCompute | CapUtility | CapGraphics | CapVideo | CapNGX
 
 	// DefaultDriverCaps is the set of driver capabilities that are enabled by
 	// default in the absence of any other configuration. See
diff --git a/pkg/sentry/devices/nvproxy/nvconf/caps_test.go b/pkg/sentry/devices/nvproxy/nvconf/caps_test.go
index 4152599e90f..c552723ab02 100644
--- a/pkg/sentry/devices/nvproxy/nvconf/caps_test.go
+++ b/pkg/sentry/devices/nvproxy/nvconf/caps_test.go
@@ -38,7 +38,7 @@ func TestNVIDIAFlagsSkipsPrivilegedCaps(t *testing.T) {
 		{
 			name: "all_plus_profiling",
 			caps: AllContainerDriverCaps | CapProfiling,
-			want: []string{"--compute", "--graphics", "--utility", "--video"},
+			want: []string{"--compute", "--graphics", "--ngx", "--utility", "--video"},
 		},
 		{
 			name: "profiling_only",