NI grpc-device CVE-2026-48137

Patch available per vendor advisory - upgrade NI grpc-device to a version newer than 2.17.0 as directed by the NI security bulletin at https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html and the upstream GitHub advisory GHSA-ww59-ghm9-mm63 at https://github.com/ni/grpc-device/security/advisories/GHSA-ww59-ghm9-mm63; the exact fixed version should be taken from those advisories. Where immediate patching is not possible, restrict network reachability of the grpc-device server's listening port to trusted measurement-host networks only via host firewall or network ACLs (trade-off: legitimate remote test clients lose access and must be re-permitted), and disable or block the sideband streaming endpoint if your workflow does not require high-throughput out-of-band data transfer (trade-off: large measurement payloads will fall back to slower in-band gRPC streams). Also consider running the grpc-device server under a low-privilege service account so a successful exploit yields fewer downstream privileges, and enable TLS with mutual client-certificate authentication on the gRPC channel to require attackers to first obtain a valid client cert.