EUVD-2026-52814
GHSA-77xh-v3q4-c2c6
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Network vector and no privileges required are plausible given component fetch over network; AC:H reflects attacker must control supply chain or network path, consistent with SSVC not-automatable and CWE-1357.
Primary rating from Vendor (nvidia).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
AnalysisAI
Remote code execution, data tampering, denial of service, and information disclosure are possible through vulnerabilities in NVIDIA Dynamo for Linux examples and recipes, affecting all versions through v1.1.0. The root cause is CWE-1357 (Relies on Insufficiently Trustworthy Component), meaning the examples or recipes bundle or reference a dependency or component without adequate integrity or trust verification, enabling an attacker to exploit that trust boundary over a network. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that NVIDIA Dynamo examples or recipes are executed in an environment where an attacker can interfere with or substitute the untrusted external component that those examples rely upon - for example, through network-level interception, DNS poisoning, dependency confusion, or a compromised upstream registry. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 8.1 (High) with a full-triad C:H/I:H/A:H impact suggests severe consequences if exploited. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who can influence the dependency resolution or component fetch mechanism invoked by a Dynamo example or recipe - for instance by operating a rogue package mirror or performing DNS/ARP manipulation on the same network segment - could substitute a malicious component in place of the expected one. When a developer or automated pipeline executes the Dynamo example, the malicious component loads and executes attacker-controlled code in the context of the host process. … |
| Remediation | Consult the NVIDIA product security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 for authoritative patch guidance; no explicit fixed version number is present in the currently available intelligence, so a patch version cannot be independently confirmed at this time - treat any version beyond v1.1.0 with caution until NVIDIA formally documents it as the remediated release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all development teams and systems using NVIDIA Dynamo examples or recipes through v1.1.0 and restrict deployment to isolated, non-internet-facing environments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Out-of-bounds write in the multimodal serving topology of NVIDIA Dynamo for Linux allows remote unauthenticated attacker
Deserialization of untrusted data in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) exposes unauthenticated remote
Out-of-bounds write in NVIDIA Dynamo for Linux enables remote unauthenticated attackers to cause denial of service or ta
Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbi
Hash collision exploitation in NVIDIA Dynamo's multimodal embedding cache on Linux allows unauthenticated remote attacke
Server-side request forgery in NVIDIA Dynamo's Rust multimodal media fetcher (Linux, versions through v1.1.0) allows una
Server-side request forgery via DNS rebinding in NVIDIA Dynamo's multimodal media fetcher exposes internal network resou
Server-side request forgery in NVIDIA Dynamo's multimodal media fetcher (Linux, versions through v1.1.0) allows unauthen
Server-side request forgery in NVIDIA Dynamo for Linux (all versions through v1.1.0) allows unauthenticated remote attac
Server-side request forgery in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) enables unauthenticated remote attack
Server-side request forgery in NVIDIA Dynamo for Linux (versions through v1.1.0) allows unauthenticated remote attackers
Race condition during LoRA manager singleton initialization in NVIDIA Dynamo for Linux (all versions through v1.1.0) all
Share
External POC / Exploit Code
Leaving vuln.today