What is the CVSS score of CVE-2026-24270?

CVE-2026-24270 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.8%.

Which versions of NVIDIA AIStore are affected by CVE-2026-24270?

NVIDIA AIStore-a critical storage layer for AI/ML infrastructure-is vulnerable to unauthenticated remote access (CVSS 9.8) that could compromise sensitive training datasets, corrupt AI models, and…

How to fix or mitigate CVE-2026-24270?

Within 24 hours: Inventory all AIStore deployments and assess production vs. non-production status; if production systems are identified, immediately restrict network access to trusted internal sources only and review access logs for suspicious connection attempts. Within 7 days: Contact NVIDIA support for patch status and timeline; implement network segmentation to isolate AIStore instances from untrusted networks and external connectivity. Within 30 days: Establish isolated testing environment; continuously monitor NVIDIA security advisories; prepare change control and deployment procedures for immediate patch deployment upon release.

NVIDIA AIStore CVE-2026-24270

EUVD-2026-41028 CRITICAL

Authentication Bypass by Spoofing (CWE-290)

2026-07-01 nvidia

GHSA-68qm-9rgj-p4pg

Authentication Bypass Nvidia Denial Of Service Information Disclosure Aistore Framework

9.8

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Remote unauthenticated authentication bypass (AV:N/AC:L/PR:N/UI:N) granting full read, write, and DoS over stored data justifies C:H/I:H/A:H; scope unchanged as impact stays within the storage service.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 15:52 vuln.today

DescriptionCVE.org

NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

Articles & Coverage 2

News 16 New Nvidia Vulnerabilities - 3 Critical, 13 High Severity Jul 02, 2026 News Critical Authentication Bypass in NVIDIA AIStore - CVE-2026-24270 Jul 01, 2026

AnalysisAI

Authentication bypass in NVIDIA AIStore, a scalable distributed object-storage framework for AI/ML data pipelines, lets a remote attacker circumvent access controls (CWE-290) and reach protected functionality without valid credentials. Because the flaw yields full confidentiality, integrity, and availability impact (CVSS 9.8), successful exploitation can enable information disclosure of stored datasets, tampering with training data, privilege escalation, and denial of service. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.

Technical ContextAI

AIStore (AIS) is NVIDIA's open-source, lightweight object-storage system designed to serve large-scale AI/ML training and inference over commodity hardware, typically fronting datasets via an S3-compatible/HTTP API across a cluster of proxy and target nodes. The weakness is classed as CWE-290 (Authentication Bypass by Spoofing), meaning the framework's authentication or identity-verification logic can be satisfied by a request that should not be trusted - for example a spoofed identity, missing token validation, or a trust decision based on attacker-controllable input. The affected CPE is cpe:2.3:a:nvidia:aistore_framework:*:*:*:*:*:*:*:*, indicating all versions prior to the fix are in scope pending confirmation of a fixed release.

RemediationAI

Consult the NVIDIA product-security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5849 and upgrade AIStore to the fixed release identified there; no vendor-released patch version was independently confirmed in the available data, so the advisory is the authoritative source for the exact fixed build. Until patched, restrict network reachability of AIStore proxy/gateway and target node HTTP/S3 API endpoints to trusted management and compute subnets via firewall or security-group rules (trade-off: may break clients that reach the cluster over broader networks), place the cluster behind an authenticating reverse proxy or service mesh that enforces identity independently of AIStore's own check (trade-off: added latency and operational complexity), and enable/verify AIStore's authentication (AuthN) server and token enforcement where applicable. Monitor access logs for anomalous unauthenticated or spoofed-identity requests to storage endpoints.