EUVD-2026-52816
GHSA-q548-vjqw-xrpx
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Network vector confirmed by inference server role; AC:H reflects inherent race timing dependency; PR:N since no auth gates inference requests; C:N as no data disclosure path is described.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering.
AnalysisAI
Race condition during LoRA manager singleton initialization in NVIDIA Dynamo for Linux (all versions through v1.1.0) allows unauthenticated remote attackers to cause denial of service or corrupt inference data by exploiting a TOCTOU flaw in concurrent initialization paths. The CVSS vector assigns high availability impact alongside low integrity impact, reflecting that service crashes are the primary outcome while data tampering represents a secondary, harder-to-achieve consequence. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target Dynamo instance is serving LoRA-adapted models and that the LoRA manager singleton has not yet completed initialization - a window that exists during initial startup or after a worker restart. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H, score 6.5) is internally consistent: network reachability is plausible given Dynamo's role as an inference server, high attack complexity reflects the timing dependency inherent to race condition exploitation, and the split between high availability and low integrity impact correctly captures the dual-outcome nature. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker sends a burst of concurrent inference requests requiring LoRA adapter loading to a Dynamo endpoint before the singleton is fully initialized - for example, immediately after a worker process restart. The simultaneous initialization paths collide, corrupting singleton state and causing the inference worker process to crash, resulting in service unavailability. … |
| Remediation | Upgrade NVIDIA Dynamo to a version beyond v1.1.0 per the NVIDIA Product Security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Out-of-bounds write in the multimodal serving topology of NVIDIA Dynamo for Linux allows remote unauthenticated attacker
Deserialization of untrusted data in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) exposes unauthenticated remote
Out-of-bounds write in NVIDIA Dynamo for Linux enables remote unauthenticated attackers to cause denial of service or ta
Remote code execution, data tampering, denial of service, and information disclosure are possible through vulnerabilitie
Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbi
Hash collision exploitation in NVIDIA Dynamo's multimodal embedding cache on Linux allows unauthenticated remote attacke
Server-side request forgery in NVIDIA Dynamo's Rust multimodal media fetcher (Linux, versions through v1.1.0) allows una
Server-side request forgery via DNS rebinding in NVIDIA Dynamo's multimodal media fetcher exposes internal network resou
Server-side request forgery in NVIDIA Dynamo's multimodal media fetcher (Linux, versions through v1.1.0) allows unauthen
Server-side request forgery in NVIDIA Dynamo for Linux (all versions through v1.1.0) allows unauthenticated remote attac
Server-side request forgery in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) enables unauthenticated remote attack
Server-side request forgery in NVIDIA Dynamo for Linux (versions through v1.1.0) allows unauthenticated remote attackers
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today