CVE-2026-65164

NVIDIA AIStore for Linux is vulnerable to a path traversal vulnerability within its dSort archive extraction component . A remote attacker can exploit this by supplying crafted archive member names to a dSort job, leading to an improper limitation of a pathname to a restricted directory. Conseque...

CVE-2026-65173

NVIDIA AIStore for Linux is susceptible to a missing authentication vulnerability in its token-revocation endpoint . An unauthenticated remote attacker can exploit this by submitting crafted token-revocation lists. A successful attack may result in data tampering and denial of service . No specif...

CVE-2026-65101

The NVIDIA AIStore for Linux software contains a vulnerability within its distributed sort component . An attacker can trigger a Server-Side Request Forgery (SSRF) by providing a specially crafted external key map URL . Successful exploitation of this flaw may result in information disclosure . N...

CVE-2026-65170

NVIDIA AIStore for Linux is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within its experimental HT backend . An unauthenticated remote attacker can exploit this by supplying a crafted original URL, which may result in information disclosure . No specific exploit details, affe...

CVE-2026-65161

NVIDIA AIStore for Linux is vulnerable to a path traversal flaw in its Promote API . An unauthenticated remote attacker can supply a crafted absolute source path to read files accessible to the target process. Successful exploitation can lead to information disclosure . No specific patch versions...

CVE-2026-65103

NVIDIA AIStore for Linux is susceptible to a path traversal vulnerability within the target-side object rename handler. An unauthenticated remote attacker can exploit this by submitting a crafted rename destination directly to an AIStore target, bypassing pathname restrictions to a restricted dir...