PT-2026-67790

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory boundary. This could result in data...

PT-2026-67803

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker could trigger a race condition during the initialization of the LoRA manager singleton. A race condition occurs when the timing or order of...

PT-2026-67796

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server-side application to make requests to an...

PT-2026-67805

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker could cause deserialization of untrusted data. Deserialization is the process of converting a data format, such as JSON or XML, back into an...

PT-2026-67800

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the Rust multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server to ma...

PT-2026-67801

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description Examples and recipes within the software contain a flaw that allows an attacker to cause a system failure. This could result in code execution, data tampering, denial of...

CVE-2026-47613: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47616: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47619: Reliance on Insufficiently Trustworthy Component

NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

PT-2026-67799

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF through DNS rebinding. DNS rebinding is a technique used to...

CVE-2026-24254: Authentication Bypass Using an Alternate Path or Channel

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosu...

CVE-2026-47623: Deserialization of Untrusted Data

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47617: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47618: Server-Side Request Forgery (SSRF)

NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-67791

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal serving topology that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory...

CVE-2026-47621: Time-of-check Time-of-use (TOCTOU) Race Condition

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...

PT-2026-67794

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the image loading component that allows an attacker to cause improper limitation of a pathname to a restricted directory. This could result in information...

CVE-2026-47620: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service...

PT-2026-67804

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can trigger the generation of error messages that reveal sensitive information, potentially leading to information disclosure. Recommendation...

PT-2026-67798

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server to make...