CVE-2026-47615: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-67793

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists in the Triton MLflow plugin where providing a specific path in the model name allows a user to read, write to, or modify files located outside...

CVE-2026-47612: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-67794

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the image loading component that allows an attacker to cause improper limitation of a pathname to a restricted directory. This could result in information...

PT-2026-67799

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF through DNS rebinding. DNS rebinding is a technique used to...

PT-2026-67804

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can trigger the generation of error messages that reveal sensitive information, potentially leading to information disclosure. Recommendation...

CVE-2026-24255: Incomplete Comparison with Missing Factors

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tamperin...

PT-2026-67792

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal embedding cache. An attacker can trigger a hash collision by submitting images that possess an identical pixel byte sequence despite having...

PT-2026-67800

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the Rust multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server to ma...

PT-2026-67790

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory boundary. This could result in data...

PT-2026-67791

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal serving topology that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory...

PT-2026-67805

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker could cause deserialization of untrusted data. Deserialization is the process of converting a data format, such as JSON or XML, back into an...

briton (>=0.3.1.dev1, <=0.3.13.post2), mobilevisiontest (1.0.1) +7 more potentially affected by CVE-2026-9856 via transformers (4.46.0)

transformers PYPI version 4.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - briton =0.3.1.dev1, =6.0.0, =6.0.0, =1.0.0, =1.2.0, =1.2.1 - slime-nlp 0.1.0 - trustrag 0.0.15 Source cves: CVE-2026-9856 Source...

SkillSpector v2.5.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2026-15978 CVE-2026-15978

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1

Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1

Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

TrendAI™ Joins Nvidia’s Open Secure AI Alliance: Closing the Gap Between AI Builders and AI Defenders

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense...