What is the CVSS score of CVE-2026-47614?

CVE-2026-47614 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Which versions of NVIDIA Dynamo are affected by CVE-2026-47614?

NVIDIA Dynamo for Linux versions 0 through v1.1.0 contain an unauthenticated server-side request forgery vulnerability enabling remote attackers to force the server to access internal services, cloud…

How to fix or mitigate CVE-2026-47614?

Within 24 hours, inventory all systems running NVIDIA Dynamo for Linux, identify which are running versions 0 through v1.1.0, and assess network exposure (internal vs. internet-facing). Within 7 days, implement network segmentation using firewall rules or security groups to restrict inbound access to Dynamo services; enable logging and monitoring for outbound HTTP requests from Dynamo processes to internal IP ranges and cloud metadata endpoints (169.254.169.254, etc.); and establish an incident response plan for potential exploitation. Within 30 days, contact NVIDIA Support for guidance on patched versions or interim workarounds; evaluate implementing WAF rules to detect SSRF patterns; restrict network egress from Dynamo services to approved endpoints only; rotate any cloud credentials or IAM tokens that may have been accessible from affected systems; and develop a timeline for upgrading to a patched version or decommissioning affected deployments.

NVIDIA Dynamo CVE-2026-47614

EUVD-2026-52806 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-08-04 nvidia

GHSA-3q7g-m267-rp98

Information Disclosure SSRF Nvidia Dynamo

7.5

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Network-accessible SSRF requiring no credentials; impact is confidentiality-only via internal resource exposure with no integrity or availability effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 18:04 vuln.today

CVE Published

Aug 04, 2026 - 17:26 cve.org

HIGH 7.5

DescriptionCVE.org

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

AnalysisAI

Server-side request forgery in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) enables unauthenticated remote attackers to cause the server to issue arbitrary backend HTTP requests. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms network-exploitable with no authentication or user interaction required, making this accessible to any attacker who can reach the Dynamo service. Successful exploitation leads to confidentiality impact - likely exposure of internal services, cloud instance metadata endpoints, or internal API responses - with no public exploit or CISA KEV listing identified at time of analysis.

Technical ContextAI

CWE-918 (Server-Side Request Forgery) describes a class of vulnerability where the application accepts a user-controlled URL or host parameter and issues a network request on behalf of the user without adequate validation or allowlisting. NVIDIA Dynamo is an AI inference serving and orchestration framework for Linux, designed to manage distributed AI workloads. The affected CPE cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:* covers all Dynamo releases from version 0 up to and including v1.1.0. In SSRF scenarios, attackers commonly target cloud provider instance metadata services (e.g., AWS IMDSv1 at 169.254.169.254), internal Kubernetes API servers, or private backend microservices that are not directly internet-accessible but are reachable from the application server's network context.

RemediationAI

The primary remediation is to upgrade NVIDIA Dynamo to a version beyond v1.1.0 per the NVIDIA product security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 - an exact patched release version is not independently confirmed from the available reference data, so consult the advisory directly for the target upgrade version. If an immediate upgrade is not feasible, apply egress filtering at the network or host level to restrict outbound connections from the Dynamo server process to only known-good destinations; this directly limits SSRF reach but may affect legitimate functionality that relies on dynamic backend communication. Additionally, enforce cloud metadata service protections such as IMDSv2-only mode on AWS or equivalent controls on other cloud platforms to prevent credential theft via metadata endpoint abuse. Restricting network exposure of the Dynamo service to trusted clients reduces the attack surface but does not eliminate the underlying vulnerability.