NI grpc-device EUVD-2026-38029

The primary remediation is to upgrade NI grpc-device to a version beyond 2.17.0 per vendor guidance. An exact patched release version is not confirmed from the available data - consult the NI security advisory at https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html and the GitHub advisory at https://github.com/ni/grpc-device/security/advisories/GHSA-j4qc-5v3f-rf87 to identify the specific fixed build for your platform. As a compensating control prior to patching, restrict network access to the grpc-device gRPC port (typically 31763/TCP) to only trusted clients and control planes via firewall rules or VPN - this reduces the authenticated attacker pool and limits exposure without affecting measurement functionality. Implementing memory usage monitoring and automatic service restart on threshold breach can contain impact in the interim, with the trade-off that restarts introduce brief service interruptions for all connected clients. Rate-limiting BeginSidebandStream calls per authenticated identity, if supported by the deployment environment, would further limit an attacker's ability to accumulate the leak.