EUVD-2026-52802
GHSA-4gq3-gh66-qq8g
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-reachable serving endpoint with no auth or interaction and low complexity (AV:N/AC:L/PR:N/UI:N); out-of-bounds write enabling code execution yields full C:H/I:H/A:H.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Articles & Coverage 1
AnalysisAI
Out-of-bounds write in the multimodal serving topology of NVIDIA Dynamo for Linux allows remote unauthenticated attackers to corrupt memory, with a rated 9.8 CVSS potentially enabling remote code execution, privilege escalation, data tampering, information disclosure, and denial of service. NVIDIA (the reporting vendor) rates it critical with a network-reachable, no-privilege, no-interaction vector. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to a reachable NVIDIA Dynamo instance and that the request traverse the multimodal serving topology - i.e., the deployment must expose the multimodal (mixed-modality) serving path that processes the attacker's crafted input. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) signals a worst-case, remotely reachable memory-corruption bug requiring no authentication or user interaction, which on paper is a top-priority issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with network reachability to a Dynamo multimodal serving endpoint submits a crafted multimodal inference request whose malformed field triggers the out-of-bounds write in the serving topology, corrupting process memory. By shaping the overflowed data, the attacker attempts to hijack control flow and execute code on the serving host, potentially pivoting into GPU inference infrastructure. … |
| Remediation | No exact fix version is present in the provided data, so no vendor-released patch version can be confirmed here; consult the NVIDIA product-security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842 for the patched release and upgrade to it as the primary remediation. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running NVIDIA Dynamo on Linux and isolate them from untrusted networks; establish real-time monitoring for exploitation attempts targeting port ranges used by multimodal serving topologies. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Deserialization of untrusted data in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) exposes unauthenticated remote
Out-of-bounds write in NVIDIA Dynamo for Linux enables remote unauthenticated attackers to cause denial of service or ta
Remote code execution, data tampering, denial of service, and information disclosure are possible through vulnerabilitie
Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbi
Hash collision exploitation in NVIDIA Dynamo's multimodal embedding cache on Linux allows unauthenticated remote attacke
Server-side request forgery in NVIDIA Dynamo's Rust multimodal media fetcher (Linux, versions through v1.1.0) allows una
Server-side request forgery via DNS rebinding in NVIDIA Dynamo's multimodal media fetcher exposes internal network resou
Server-side request forgery in NVIDIA Dynamo's multimodal media fetcher (Linux, versions through v1.1.0) allows unauthen
Server-side request forgery in NVIDIA Dynamo for Linux (all versions through v1.1.0) allows unauthenticated remote attac
Server-side request forgery in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) enables unauthenticated remote attack
Server-side request forgery in NVIDIA Dynamo for Linux (versions through v1.1.0) allows unauthenticated remote attackers
Race condition during LoRA manager singleton initialization in NVIDIA Dynamo for Linux (all versions through v1.1.0) all
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today