EUVD-2026-26077Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.
AnalysisAI
NVIDIA Flare SDK is vulnerable to path traversal via improper input validation, allowing authenticated remote attackers to disclose sensitive information. The vulnerability affects all versions of the SDK and requires valid user credentials to exploit, making it a moderate-risk issue for organizations using Flare in multi-user environments. No public exploit code or active exploitation has been identified.
Technical ContextAI
NVIDIA Flare SDK is a federated learning framework that enables collaborative machine learning across distributed data sources. The vulnerability stems from CWE-20 (Improper Input Validation), specifically a path traversal flaw where user-supplied input is not properly validated before being used in file system operations. An attacker with valid credentials can manipulate file path parameters (such as directory or file name inputs) to traverse beyond intended boundaries (e.g., using '../' sequences) and access files outside the intended directory structure. This is a common pattern in web and distributed applications where input sanitization is insufficient.
RemediationAI
Consult NVIDIA's official security advisory at https://nvidia.custhelp.com/app/answers/detail/a_id/5819 for the exact patched version. Once a patch is released, upgrade Flare SDK to the fixed version immediately. As an interim mitigation for organizations unable to patch quickly, implement strict input validation on all file path parameters by employing allowlist-based path resolution (only permit access to explicitly approved directories), use chroot or containerization to limit file system scope accessible to the Flare process, restrict Flare SDK deployment to trusted networks with strict access controls, and audit access logs for unusual file operations. These compensating controls reduce but do not eliminate risk and should be considered temporary until patching is possible.
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
Authentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before G
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privi
NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows a
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today