What is the CVSS score of CVE-2026-47612?

CVE-2026-47612 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.5%.

Which versions of NVIDIA Dynamo are affected by CVE-2026-47612?

NVIDIA Dynamo's image loading component contains an unauthenticated path traversal vulnerability (CVE-2026-47612) that enables remote attackers to read arbitrary files from affected Linux servers.

How to fix or mitigate CVE-2026-47612?

Within 24 hours, identify all systems running NVIDIA Dynamo versions 0 through v1.0.0 on Linux and assess network exposure-prioritize internet-facing instances. Over the next 7 days, implement network segmentation to restrict access to affected Dynamo instances, enable logging for the image loading component, and conduct a security audit of potentially exposed files for breach indicators. Within 30 days, establish a patch management plan including testing and deployment procedures for the eventual vendor patch, monitor NVIDIA security advisories closely for updates, and evaluate alternative solutions if patching is significantly delayed.

NVIDIA Dynamo CVE-2026-47612

EUVD-2026-52804 HIGH

Path Traversal (CWE-22)

2026-08-04 nvidia

GHSA-xc5r-xx6g-q3cj

Information Disclosure Path Traversal Nvidia Dynamo

7.5

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Network-reachable service requires no authentication per description and CVSS PR:N; impact is read-only file disclosure with no integrity or availability effect confirmed.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 18:03 vuln.today

CVE Published

Aug 04, 2026 - 17:24 cve.org

HIGH 7.5

DescriptionCVE.org

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.

AnalysisAI

Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbitrary files outside the intended restricted directory, resulting in high-severity information disclosure. All releases from version 0 through v1.0.0 are affected, per EUVD-2026-52804 and the NVIDIA product security advisory. No public exploit code or active exploitation has been identified at time of analysis, though the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates low-complexity, authentication-free exploitation against any network-exposed instance.

Technical ContextAI

NVIDIA Dynamo is an AI inference acceleration framework designed for Linux environments. The vulnerability resides in its image loading component, which fails to enforce proper path canonicalization or sanitization on user-supplied file paths - a classic CWE-22 (Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal). By supplying traversal sequences such as '../' in the image path input, an attacker can escape the intended working or storage directory and direct the component to read files anywhere the Dynamo process has filesystem access. The CPE cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:* confirms all versions of the Dynamo application are affected, with EUVD scoping this to releases 0 through v1.0.0. The root cause is missing or bypassable input validation in the file path handling logic before the read operation is performed.

RemediationAI

Consult the NVIDIA product security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 for the official patch or upgrade - an exact fixed version number is not independently confirmed from the available source data, but the advisory covers the full affected range (0 through v1.0.0) and should be treated as authoritative. As a compensating control prior to patching, restrict network access to NVIDIA Dynamo services to trusted internal networks or authenticated reverse proxies, preventing untrusted actors from reaching the image loading endpoint; note this may require firewall rule changes and does not eliminate the underlying flaw. If the image loading feature accepts user-controlled path inputs, disabling or strictly allowlisting accepted path values is a targeted mitigation, though this may reduce functionality depending on use case. Additionally, ensure the Dynamo process runs under a least-privilege OS account with minimal filesystem read permissions, so that even if traversal is achieved, the accessible file scope is minimized.