CVE-2025-23260

NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-33185

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

EUVD-2025-93533

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

EUVD-2025-93534

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

CVE-2025-33185

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the AuthN implementation. An attacker can access sensitive information by sending unauthorized requests. Remediation Upgrade github.com/NVIDIA/aistore/ais to version 1.3.31 or higher. References - GitHub Release...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in the AuthN component that could allow privilege escalation, information disclosure, and data tampering (CVSSv3.1 base score 8.8, Network attack, No authentication required, user interaction required). Affected: NVIDIA AIStore AuthN across versions prior t...

CVE-2025-33185

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-33185

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-33185

CVE-2025-33185 affects NVIDIA AIStore’s AuthN component. The vulnerability allows an unauthenticated user to cause information disclosure. NVIDIA’s advisory and Red Hat/NVD references describe it as an AuthN information-disclosure issue, with affected product: NVIDIA AIStore AuthN. The NVIDIA bul...

NVIDIA AIStore 安全漏洞

NVIDIA AIStore is a lightweight storage stack designed for AI applications from NVIDIA. A security vulnerability exists in NVIDIA AIStore that originates from AuthN unauthenticated users could lead to information disclosure...

NVIDIA AIStore 信任管理问题漏洞

NVIDIA AIStore is a lightweight storage stack designed for AI applications from NVIDIA. NVIDIA AIStore suffers from a trust management issue vulnerability that stems from a flaw in AuthN that could lead to elevated privileges, information disclosure, and data tampering...

PT-2025-46375

Name of the Vulnerable Software and Affected Versions NVIDIA AIStore affected versions not specified Description NVIDIA AIStore has an issue in its authentication process AuthN that allows an unauthenticated user to potentially disclose information. Exploitation of this issue may lead to...

PT-2025-46376

Name of the Vulnerable Software and Affected Versions NVIDIA AIStore affected versions not specified Description NVIDIA AIStore contains a security flaw in the Authentication AuthN component. A successful exploit of this issue may lead to escalation of privileges, information disclosure, and data...

EUVD-2025-27707

Malicious code in bioql PyPI...

CVE-2025-23260

NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure...