What is the CVSS score of EUVD-2026-52800?

EUVD-2026-52800 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H. EPSS exploitation probability: 0.3%.

Which versions of NVIDIA Dynamo are affected by EUVD-2026-52800?

NVIDIA Dynamo for Linux is vulnerable to unauthenticated remote attacks (CVE-2026-24253, CVSS 8.2) that can disrupt AI inference services or corrupt model data without requiring user interaction.

How to fix or mitigate EUVD-2026-52800?

Within 24 hours, inventory all systems running NVIDIA Dynamo for Linux and prioritize those supporting production AI workloads. Within 7 days, implement network-level access controls restricting inbound connections to affected systems, enable detailed logging and monitoring for exploitation attempts, and request a patch timeline from NVIDIA. Within 30 days, establish a vendor patch application schedule and evaluate interim compensating controls such as network segmentation or running Dynamo in isolated environments if the patch remains unavailable.

NVIDIA Dynamo EUVD-2026-52800

| CVE-2026-24253 HIGH

Out-of-bounds Write (CWE-787)

2026-08-04 nvidia

GHSA-5c7q-rvp2-6mxc

Buffer Overflow Nvidia Memory Corruption Denial Of Service Dynamo

8.2

CVSS 3.1 · Vendor: nvidia

Severity by source

Vendor (nvidia) PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

vuln.today AI

8.2 HIGH

Network-reachable service with no auth requirement; DoS is primary impact (A:H); data tampering is limited (I:L); no confidentiality exposure described.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 18:02 vuln.today

CVE Published

Aug 04, 2026 - 17:22 cve.org

HIGH 8.2

DescriptionCVE.org

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.

AnalysisAI

Out-of-bounds write in NVIDIA Dynamo for Linux enables remote unauthenticated attackers to cause denial of service or tamper with data via network-reachable attack surface, scoring CVSS 8.2 High. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication, no special conditions, and no user interaction are required for exploitation. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify reachable Dynamo inference endpoint

Delivery

Craft malformed network payload

Exploit

Send payload to trigger out-of-bounds write

Execution

Corrupt adjacent memory in Dynamo process

Impact

Crash service for DoS or manipulate in-memory data

Access

Identify reachable Dynamo inference endpoint

Delivery

Craft malformed network payload

Exploit

Send payload to trigger out-of-bounds write

Execution

Corrupt adjacent memory in Dynamo process

Impact

Crash service for DoS or manipulate in-memory data

Vulnerability AssessmentAI

Exploitation	No special conditions are required per the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U), indicating remote unauthenticated exploitation against default configurations of NVIDIA Dynamo on Linux. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 8.2 High score is driven by the fully remote, unauthenticated, zero-complexity attack path (AV:N/AC:L/PR:N/UI:N), which represents a worst-case network exposure profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker with network access to a NVIDIA Dynamo inference endpoint sends a specially crafted request containing malformed payload data that triggers an out-of-bounds write in Dynamo's request processing logic. The corrupted memory region causes the Dynamo service process to crash, denying inference availability to legitimate users, or in a more controlled scenario, corrupts in-memory data structures to alter inference results or intermediate computation state. …
Remediation	The primary remediation is to review the NVIDIA Product Security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 for patch availability and exact fixed version numbers, as no specific patched version was included in the supplied data - the patch status is 'patch available per vendor advisory' based on NVIDIA's self-disclosure, but the precise fix version is not independently confirmed from this dataset. … Detailed patch versions, workarounds, and compensating controls in full report.