15 matches found
CVE-2026-47614
NVIDIA Dynamo for Linux contains a vulnerability (CVE-2026-47614) that could allow server-side request forgery leading to information disclosure. The NVIDIA security bulletin lists this CVE among several SSRF issues and recommends updating affected Linux releases to a newer Dynamo version (update...
CVE-2026-24254
CVE-2026-24254 affects NVIDIA Dynamo for Linux in the multimodal serving topology. The vulnerability permits an out-of-bounds write, with potential consequences including code execution, privilege escalation, data tampering, denial of service, and information disclosure. Affected software/version...
CVE-2026-47621
NVIDIA Dynamo for Linux contains a race condition in the LoRA manager singleton initialization (CVE-2026-47621). The issue affects the LoRA manager component and can lead to denial of service and data tampering. The provided materials specify a CVSS 3.1 base score of 6.5 (Medium) with network att...
CVE-2026-24253
NVIDIA Dynamo for Linux contains CVE-2026-24253, a vulnerability that could allow an attacker to cause an out-of-bounds write, potentially leading to denial of service and data tampering. The NVIDIA security bulletin lists this CVE under the NVIDIA Dynamo - August 2026 update, with remediation vi...
CVE-2026-47619
CVE-2026-47619 affects NVIDIA Dynamo for Linux, specifically the examples and recipes component, with potential to cause a system failure and possible outcomes including code execution, data tampering, denial of service, and information disclosure as described in the CVE text. NVIDIA’s security b...
CVE-2026-47616
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher that could allow a network attacker to trigger a server-side request forgery, potentially leading to information disclosure. Affected software: NVIDIA Dynamo for Linux. Root cause/impact: SSRF in multimodal media fet...
CVE-2026-47617
Summary (CVE-2026-47617) : NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher that could allow an attacker to perform a server-side request forgery via DNS rebinding , with potential information disclosure . The CVSS vector (Network, Low attack complexity, No privile...
CVE-2026-47620
CVE-2026-47620 affects NVIDIA Dynamo for Linux. The issue is a race condition in the LoRA manager singleton initialization, which could allow data tampering and denial of service. The CVSSv3.1 base score is 6.5 (Medium) with Network attack vector, high attack complexity, no privileges required, n...
CVE-2026-47615
Summary: CVE-2026-47615 affects NVIDIA Dynamo for Linux. Affected component: server-side request forgery via a crafted URL in a multimodal request, with potential information disclosure as the impact. Root cause and exact vulnerable subcomponent are described in the NVIDIA/NVD entries. CVSSv3.1 m...
CVE-2026-47618
CVE-2026-47618 affects NVIDIA Dynamo for Linux, specifically the Rust multimodal media fetcher. The vulnerability enables server-side request forgery (SSRF) that could lead to information disclosure. The NVIDIA bulletin lists affected versions (0 to v1.1.0) updated to v1.1.1, with additional fixe...
CVE-2026-47613
NVIDIA Dynamo for Linux contains a vulnerability (CVE-2026-47613) where a crafted local path in a multimodal request can improperly limit a pathname to a restricted directory, potentially leading to information disclosure. The NVIDIA security bulletin indicates affected versions 0 to v1.1.0 with ...
CVE-2026-47612
Summary: NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory, potentially leading to information disclosure. The CVSSv3.1 base score is 7.5 (High) with network attack vector and no ...
CVE-2026-47623
NVIDIA Dynamo for Linux contains a deserialization of untrusted data vulnerability (CVE-2026-47623) that could lead to denial of service and data tampering. Affected: NVIDIA Dynamo on Linux, prior to version 1.2.0. Remediation: update to v1.2.0 as listed in the NVIDIA security updates; vulnerabil...
CVE-2026-24255
NVIDIA Dynamo for Linux is affected by CVE-2026-24255 in the multimodal embedding cache. The issue arises when submitting images that share an identical pixel byte sequence but have different dimensions, potentially enabling data tampering via a hash collision. Affected product: NVIDIA Dynamo for...
CVE-2026-47622
Technical details for CVE-2026-47622 are not publicly available in the provided documents. The sources describe an information disclosure risk but do not disclose affected components, root cause, or mitigations. Monitor for updates.