NVIDIA UFM Enterprise CVE-2026-24166

Exploitation requires local access to a host running any supported NVIDIA UFM Enterprise release (GA, LTS 2023, LTS 2024, or LTS 2025). The CVSS high attack complexity (AC:H) indicates the attacker must possess specific technical capability to locate, extract, and operationalize the hard-coded key from the session management component - passive network access and remote exploitation are precluded by the local attack vector (AV:L). Limiting factors include the mandatory local system presence (physical or via existing local shell), the significant reverse-engineering effort implied by AC:H, and the requirement that session material to decrypt or forge must be accessible on the same host. The PR:N assignment in the official vector suggests no privileged local account is required, but this warrants validation with the NVIDIA advisory, as reading session management state may implicitly require elevated permissions in certain OS configurations. The vulnerability is not restricted to a specific non-default configuration - any deployment of the affected release tracks appears in scope per the wildcard CPE entries.

The official CVSS 3.1 score of 5.1 (Medium) reflects a local attack vector (AV:L) and high attack complexity (AC:H), indicating exploitation requires physical or logical local access and non-trivial reverse-engineering capability. No EPSS score is present in the available intelligence, preventing probabilistic exploitation forecasting. No CISA KEV listing and no publicly identified POC mean active exploitation is not confirmed - however, the hard-coded key characteristic is particularly insidious: once the key is extracted from any single UFM installation, it functions universally across all deployments of the same build, effectively reducing the marginal effort for subsequent targets. The described privilege escalation potential elevates real-world impact beyond what the raw CVSS score implies, since UFM manages high-value InfiniBand fabric infrastructure in HPC and AI data centers. The official PR:N (no privileges required) assignment warrants independent validation against the NVIDIA advisory, as accessing session management artifacts on a running system may implicitly require elevated local permissions in practice - defenders should not assume the exploitation bar is as low as PR:N suggests without vendor confirmation.

An attacker who has obtained local access to a UFM Enterprise host - via a compromised administrator account, a shared multi-tenant HPC environment, or physical access - reverse-engineers the hard-coded cryptographic key from the UFM session management binary. Using this extracted key, the attacker decrypts or forges session tokens belonging to a higher-privileged UFM administrator, authenticating as that user to gain elevated control over the InfiniBand fabric management plane. No public POC has been identified; this scenario reflects the logical attack path implied by the CWE-321 classification and the description's reference to privilege escalation.