EUVD-2026-98561
GHSA-p7jh-2q67-m86v
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain local access to NVSentinel host
-
ExploitConnect to world-writable gRPC Unix socket
-
ExecutionSend malformed/abusive health events
-
ImpactCrash platform-connectors service (DoS)
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires local access to a host running NVIDIA NVSentinel with the platform-connectors component active and its gRPC health-event Unix domain socket present. Because that socket is world-writable and unauthenticated, any local account can connect to the interface regardless of its privilege level. Exploitation is LIMITED by the need for local (non-network) presence on the host and by the impact being confined to denial of service (no data disclosure or modification). Note: the vendor CVSS marks PR:H, but the world-writable/no-auth description contradicts a high-privilege requirement, so the true privilege barrier is likely lower than the vector states. |
| Impact | This is a moderate-severity, local-only availability issue, not a widespread network threat. The provided CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, score 6.0) scopes exploitation to a local attacker and confines impact to denial of service (A:H only; no confidentiality or integrity loss). There is a direct CONFLICT between the vendor CVSS and the description: the vector asserts PR:H (high privileges required), yet the description states the gRPC health-event socket is 'world-writable' and 'lacks authentication', which implies any local user - not a privileged one - can reach it. This contradiction materially raises real-world risk versus the raw 6.0 and should be verified with NVIDIA, since PR:H appears to understate exploitability. No EPSS score, SSVC decision, KEV listing, or POC indicator was supplied. With no network vector and no public exploit, this is a genuine but contained priority: relevant to multi-tenant or shared Linux hosts running NVSentinel, low urgency for single-operator deployments. It is a real hardening issue rather than an emergency, but the PR:H/world-writable mismatch means do not dismiss it on CVSS alone. |
| Exploit ScenarioDerived | A low-privileged local user (or a compromised co-located process) on a host running NVIDIA NVSentinel connects to the world-writable, unauthenticated Unix domain socket exposed by the platform-connectors gRPC health-event interface and submits malformed or flooding health events, crashing or hanging the monitoring service and denying availability. No special privileges, user interaction, or network access are needed. No public exploit code was identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 13, 2026
Denial of service in NVIDIA NVSentinel for Linux: the platform-connectors component exposes its gRPC health-event interface over a world-writable Unix domain socket that performs no authentication (CWE-306), letting a local user drive health-event traffic into the service. NVIDIA rates it 6.0 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H), but the world-writable, unauthenticated socket contradicts the high-privilege prerequisite, so the practical barrier is lower and the effective vector is closer to PR:L - any local account on the host can reach the interface. Exploitation requires local (non-network) presence on a host running NVSentinel with platform-connectors active, and impact is confined to availability with no data disclosure or modification; no public exploit code was identified at time of analysis.
RemediationAI
No vendor-released patch version is identified in the available data, so the authoritative fix must be taken from NVIDIA's advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5890 (cross-referenced by NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65131); treat that page as the source of the patched NVSentinel release and upgrade as soon as a fixed build is published. Until then, the highest-value compensating control is to remove the world-writable property from the platform-connectors health-event socket - set it to 0600 or 0660 and change ownership to a dedicated service account and group - which eliminates the unauthenticated path for arbitrary local users; the trade-off is that legitimate clients must then run as that account or hold membership in that group, so existing integrations may need credential or group changes. If no local client genuinely needs the socket, stop the platform-connectors component or disable the health-event listener entirely, accepting the loss of health-event telemetry and automated remediation signals for that node. Hosts can be further limited by restricting interactive and service logins to trusted administrators so that fewer local accounts can reach the socket at all, though this is weak on multi-tenant or shared nodes. Because the gRPC service itself does not authenticate callers, network-layer or firewall rules provide no protection - the socket is local - so auditing for unexpected processes connecting to the socket and monitoring the NVSentinel service for abnormal health-event volume are useful detection measures rather than preventive ones.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
NVSentinel is NVIDIA's GPU-node health monitoring and remediation framework; its platform-connectors component bridges the node agent with platform-specific health signals and exposes a gRPC interface for health events. That interface is bound to a Unix domain socket - filesystem-based inter-process communication rather than a TCP port - and the socket is world-writable while the gRPC service enforces no authentication. The root cause class is CWE-306, Missing Authentication for Critical Function: the service trusts caller identity implicitly from filesystem access rather than verifying credentials, and filesystem permissions are themselves permissive enough that any local process can connect and submit health events. Because the compromised interface sits inside the monitoring/remediation path, malformed or spurious health events can disturb the component's behavior and degrade availability of the host's management path, which is why the vendor vector scores scope change (S:C) and high availability impact (A:H) with no confidentiality or integrity impact. The disagreement between the vendor's PR:H and the described world-writable socket is a meaningful analytic signal: the true privilege requirement is likely whatever privilege is needed to exist as a local user, i.e. low.
Know when Nvidia gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
A world-writable, unauthenticated socket means any local user can reach it, so PR:L (not PR:H); local-only vector, no UI, availability-only impact with scope change to the monitored platform.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
DescriptionCVE.org
NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
Authentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craft
NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before G
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privi
NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de
Exploit-DB