EUVD-2026-52812
GHSA-h44j-2vgw-q5f2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
DNS rebinding requires attacker-controlled DNS infrastructure and precise timing, warranting AC:H over the vendor's AC:L; no authentication needed and no integrity or availability impact.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.
AnalysisAI
Server-side request forgery via DNS rebinding in NVIDIA Dynamo's multimodal media fetcher exposes internal network resources to remote unauthenticated attackers. All Dynamo releases from version 0 through v1.1.0 on Linux are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The NVIDIA Dynamo multimodal media fetcher must be reachable over the network and must process attacker-influenced media URLs - either via a public inference API endpoint or an authenticated endpoint accessible to a low-privileged user. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 7.5 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) rates this as High severity with no authentication requirement and low attack complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers a domain (e.g., attacker.example) with a very short TTL and an initial A record pointing to a permitted external IP, then submits a media URL using that domain to a NVIDIA Dynamo inference endpoint. After the media fetcher performs its first DNS lookup and caches the external IP as trusted, the attacker flips the DNS A record to an internal IP such as 169.254.169.254; the fetcher's next HTTP request resolves via a fresh DNS query, obtaining the internal address and fetching cloud instance metadata or internal service data, which is then returned to or retrievable by the attacker. … |
| Remediation | Upgrade NVIDIA Dynamo to a version beyond v1.1.0 as indicated by the affected version range in EUVD-2026-52812; the exact fixed release version is not independently confirmed in the available data - consult the NVIDIA product security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 for the precise patched version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all servers running NVIDIA Dynamo v0-v1.1.0 on Linux and implement emergency network segmentation to isolate the media fetcher from internal networks and cloud metadata endpoints. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Out-of-bounds write in the multimodal serving topology of NVIDIA Dynamo for Linux allows remote unauthenticated attacker
Deserialization of untrusted data in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) exposes unauthenticated remote
Out-of-bounds write in NVIDIA Dynamo for Linux enables remote unauthenticated attackers to cause denial of service or ta
Remote code execution, data tampering, denial of service, and information disclosure are possible through vulnerabilitie
Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbi
Hash collision exploitation in NVIDIA Dynamo's multimodal embedding cache on Linux allows unauthenticated remote attacke
Server-side request forgery in NVIDIA Dynamo's Rust multimodal media fetcher (Linux, versions through v1.1.0) allows una
Server-side request forgery in NVIDIA Dynamo's multimodal media fetcher (Linux, versions through v1.1.0) allows unauthen
Server-side request forgery in NVIDIA Dynamo for Linux (all versions through v1.1.0) allows unauthenticated remote attac
Server-side request forgery in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) enables unauthenticated remote attack
Server-side request forgery in NVIDIA Dynamo for Linux (versions through v1.1.0) allows unauthenticated remote attackers
Race condition during LoRA manager singleton initialization in NVIDIA Dynamo for Linux (all versions through v1.1.0) all
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today