PT-2026-67797

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can trigger server-side request forgery SSRF—a technique that allows a server to make requests to an unintended location—by providing a craft...

PT-2026-67792

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal embedding cache. An attacker can trigger a hash collision by submitting images that possess an identical pixel byte sequence despite having...

PT-2026-67793

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists in the Triton MLflow plugin where providing a specific path in the model name allows a user to read, write to, or modify files located outside...

CVE-2026-47487: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...

CVE-2026-47612: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

PT-2026-67795

Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can cause improper limitation of a pathname to a restricted directory by providing a crafted local path within a multimodal request. This cou...

CVE-2026-47622: Generation of Error Message Containing Sensitive Information

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

briton (>=0.3.1.dev1, <=0.3.13.post2), mobilevisiontest (1.0.1) +7 more potentially affected by CVE-2026-9856 via transformers (4.46.0)

transformers PYPI version 4.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - briton =0.3.1.dev1, =6.0.0, =6.0.0, =1.0.0, =1.2.0, =1.2.1 - slime-nlp 0.1.0 - trustrag 0.0.15 Source cves: CVE-2026-9856 Source...

SkillSpector v2.5.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2026-15978 CVE-2026-15978

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1

Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1

Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

TrendAI™ Joins Nvidia’s Open Secure AI Alliance: Closing the Gap Between AI Builders and AI Defenders

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense...

Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense...

USN-8623-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Arm Firmware Framework for ARMv8-AFFA; CVE-2026-53354, CVE-2026-64520...

USN-8622-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Arm Firmware Framework for ARMv8-AFFA; CVE-2026-53354, CVE-2026-64520...

SUSE CVE-2026-64832

FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ffnvdecstartframesepref error path frees...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...