Skip to main content

NVIDIA Dynamo EUVDEUVD-2026-52817

| CVE-2026-47622 MEDIUM
Error Message Information Leak (CWE-209)
2026-08-04 nvidia GHSA-4qj4-pv32-cxrr
Nvidia Information Disclosure Dynamo
5.3
CVSS 3.1 · Vendor: nvidia
Share

Severity by source

Vendor (nvidia) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
vuln.today AI
5.3 MEDIUM

Network-reachable without authentication (AV:N, PR:N), trivial to trigger errors (AC:L), impact confined to partial confidentiality disclosure with no integrity or availability effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (nvidia).

CVSS VectorVendor: nvidia

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Aug 04, 2026 - 18:10 vuln.today
CVE Published
Aug 04, 2026 - 17:33 cve.org
MEDIUM 5.3

DescriptionCVE.org

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.

AnalysisAI

NVIDIA Dynamo for Linux versions 0 through v1.2.0 leaks sensitive information through crafted error message generation, exploitable remotely without authentication. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms low-complexity unauthenticated network access is sufficient to trigger disclosure. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Send crafted request to Dynamo network endpoint
Delivery
Trigger internal error condition
Exploit
Service returns error message with sensitive data
Execution
Attacker captures leaked internal details
Impact
Use reconnaissance data for follow-on attack
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special conditions are required for initial network access - the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote unauthenticated exploitation against default configurations of NVIDIA Dynamo for Linux. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The vendor-assigned CVSS 3.1 score of 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N positions this as a straightforward, low-complexity network exploit requiring no authentication, but with a constrained impact ceiling of partial confidentiality loss. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated remote attacker sends crafted requests - such as malformed inputs or unexpected API calls - to a network-accessible NVIDIA Dynamo instance, deliberately triggering error conditions within the service. The resulting error messages are returned to the attacker and contain sensitive internal details such as file system paths, configuration parameters, or internal state. …
Remediation The primary remediation is to apply the vendor-issued fix for NVIDIA Dynamo referenced in the NVIDIA Product Security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5842. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Dynamo

View all
CVE-2026-24254 CRITICAL
9.8 Aug 04

Out-of-bounds write in the multimodal serving topology of NVIDIA Dynamo for Linux allows remote unauthenticated attacker
CVE-2026-47623 HIGH
8.2 Aug 04

Deserialization of untrusted data in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) exposes unauthenticated remote

CVE-2026-24253 HIGH
8.2 Aug 04

Out-of-bounds write in NVIDIA Dynamo for Linux enables remote unauthenticated attackers to cause denial of service or ta
CVE-2026-47619 HIGH
8.1 Aug 04

Remote code execution, data tampering, denial of service, and information disclosure are possible through vulnerabilitie
CVE-2026-47612 HIGH
7.5 Aug 04

Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbi
CVE-2026-24255 HIGH
7.5 Aug 04

Hash collision exploitation in NVIDIA Dynamo's multimodal embedding cache on Linux allows unauthenticated remote attacke
CVE-2026-47618 HIGH
7.5 Aug 04

Server-side request forgery in NVIDIA Dynamo's Rust multimodal media fetcher (Linux, versions through v1.1.0) allows una
CVE-2026-47617 HIGH
7.5 Aug 04

Server-side request forgery via DNS rebinding in NVIDIA Dynamo's multimodal media fetcher exposes internal network resou
CVE-2026-47616 HIGH
7.5 Aug 04

Server-side request forgery in NVIDIA Dynamo's multimodal media fetcher (Linux, versions through v1.1.0) allows unauthen
CVE-2026-47615 HIGH
7.5 Aug 04

Server-side request forgery in NVIDIA Dynamo for Linux (all versions through v1.1.0) allows unauthenticated remote attac
CVE-2026-47614 HIGH
7.5 Aug 04

Server-side request forgery in NVIDIA Dynamo for Linux (versions 0 through v1.1.0) enables unauthenticated remote attack
CVE-2026-47613 HIGH
7.5 Aug 04

Server-side request forgery in NVIDIA Dynamo for Linux (versions through v1.1.0) allows unauthenticated remote attackers

Same weakness CWE-209 – Error Message Information Leak

View all
CVE-2025-47813 MEDIUM POC
4.3
CVE-2017-7551 CRITICAL POC
9.8
CVE-2026-48039 CRITICAL POC
9.1
CVE-2022-31140 CRITICAL POC
9.1
CVE-2024-23689 HIGH POC
8.8
CVE-2018-17961 HIGH POC
8.6
CVE-2023-37306 HIGH POC
7.5
CVE-2026-29146 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-52817 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy