What is the CVSS score of CVE-2026-47618?

CVE-2026-47618 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Which versions of NVIDIA Dynamo are affected by CVE-2026-47618?

NVIDIA Dynamo's media fetcher (versions through v1.1.0) contains a server-side request forgery vulnerability enabling unauthenticated attackers to extract sensitive data from internal networks and…

How to fix or mitigate CVE-2026-47618?

Within 24 hours: identify and inventory all deployments of NVIDIA Dynamo v1.1.0 and earlier in production and development environments, restrict network access to affected systems using firewall rules blocking external inbound connections, and enable egress traffic logging for forensic review. Within 7 days: implement web application firewall rules blocking requests to RFC1918 ranges and 169.254.169.254, enforce mutual TLS or API key authentication on all Dynamo endpoints, and evaluate alternative media fetching solutions from vendors with established patch cadences. Within 30 days: either upgrade to a patched version if released by NVIDIA or complete migration to a replacement solution with confirmed SSRF protections.

NVIDIA Dynamo CVE-2026-47618

EUVD-2026-52813 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-08-04 nvidia

GHSA-25vv-hwhq-wjg6

Information Disclosure SSRF Nvidia Dynamo

7.5

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Network-reachable fetcher with no auth required; SSRF yields confidentiality impact only, no integrity or availability effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 18:06 vuln.today

CVE Published

Aug 04, 2026 - 17:31 cve.org

HIGH 7.5

DescriptionCVE.org

NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

AnalysisAI

Server-side request forgery in NVIDIA Dynamo's Rust multimodal media fetcher (Linux, versions through v1.1.0) allows unauthenticated remote attackers to coerce the server into issuing arbitrary HTTP requests to attacker-controlled destinations. A successful exploit can expose sensitive internal network resources, cloud metadata endpoints (e.g., IMDS at 169.254.169.254), or internal API responses, resulting in high-confidence information disclosure. No public exploit code or CISA KEV listing exists at time of analysis.

Technical ContextAI

NVIDIA Dynamo is a distributed AI inference framework designed for large-scale LLM serving workloads, running on Linux. The vulnerable component is its Rust-language multimodal media fetcher, responsible for retrieving external media assets as part of inference pipelines. CWE-918 (Server-Side Request Forgery) arises when user-controlled input is used to construct and execute server-side HTTP requests without adequate URL validation or allowlisting. This enables requests to be directed at internal services ordinarily unreachable from the external network - including private API endpoints, cloud provider instance metadata services, and intranet-facing systems. The CPE string cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:* confirms broad version applicability. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates the fetcher is reachable over the network without authentication and with no configuration prerequisites.

RemediationAI

Consult the NVIDIA Product Security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 for the official patched release version - the exact fixed version is not independently confirmed from the available input data, so treat the advisory as the authoritative source before upgrading. As a compensating control pending patch application, restrict network ingress to the Dynamo media fetcher endpoint to trusted clients only via firewall or network policy rules; note this does not eliminate the vulnerability but reduces attacker reach. Additionally, apply egress filtering on Dynamo host or container to block requests to cloud metadata IPs (169.254.169.254, fd00:ec2::254) and internal RFC-1918 ranges - this directly limits SSRF pivot impact but may interfere with legitimate fetcher functionality depending on deployment topology.