PT-2026-67800

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the Rust multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server to ma...

CVE-2026-47618: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-67793

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists in the Triton MLflow plugin where providing a specific path in the model name allows a user to read, write to, or modify files located outside...

PT-2026-67794

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the image loading component that allows an attacker to cause improper limitation of a pathname to a restricted directory. This could result in information...

PT-2026-67790

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory boundary. This could result in data...

PT-2026-67804

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can trigger the generation of error messages that reveal sensitive information, potentially leading to information disclosure. Recommendation...

CVE-2026-24255: Incomplete Comparison with Missing Factors

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

PT-2026-67792

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal embedding cache. An attacker can trigger a hash collision by submitting images that possess an identical pixel byte sequence despite having...

PT-2026-67805

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker could cause deserialization of untrusted data. Deserialization is the process of converting a data format, such as JSON or XML, back into an...

PT-2026-67799

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF through DNS rebinding. DNS rebinding is a technique used to...

PT-2026-67791

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal serving topology that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory...

PT-2026-67797

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can trigger server-side request forgery SSRF—a technique that allows a server to make requests to an unintended location—by providing a craft...

PT-2026-67802

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker could trigger a race condition during the initialization of the LoRA manager singleton. A race condition occurs when the timing or order of...

CVE-2026-47487: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...

PT-2026-67795

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can cause improper limitation of a pathname to a restricted directory by providing a crafted local path within a multimodal request. This cou...

briton (>=0.3.1.dev1, <=0.3.13.post2), mobilevisiontest (1.0.1) +7 more potentially affected by CVE-2026-9856 via transformers (4.46.0)

transformers PYPI version 4.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - briton =0.3.1.dev1, =6.0.0, =6.0.0, =1.0.0, =1.2.0, =1.2.1 - slime-nlp 0.1.0 - trustrag 0.0.15 Source cves: CVE-2026-9856 Source...

SkillSpector v2.5.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2026-15978 CVE-2026-15978

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...