NVIDIA AIStore EUVD-2026-98554

Exploitation requires the attacker to reach AIStore's Promote API over the network and supply a crafted absolute source path; the Promote feature (used to move/import files from the filesystem into the object store) must be reachable and functional on the target proxy/target node. No authentication is required (PR:N) and no user interaction is needed (UI:N), so default network-exposed deployments are at risk. The practical limiting factors are: (1) the AIStore Promote endpoint must be network-accessible to the attacker (clusters restricted to trusted internal networks are harder to reach), and (2) disclosure is confined to files readable by the AIStore process's OS privileges, so process account permissions bound the blast radius.

All provided signals point to a genuine but moderate-priority network-exposed information-disclosure flaw rather than a critical emergency. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms a low-complexity, unauthenticated, remote attack path with no user interaction, which justifies the 7.5 base score driven entirely by high confidentiality impact (C:H) with no integrity or availability impact (I:N/A:N) and an unchanged scope (S:U). However, several escalation signals that would elevate real-world urgency are absent from the input: there is no EPSS exploitation-probability score provided, no CISA KEV listing, and no public POC referenced - so this is not confirmed as actively exploited or widely weaponized. The practical risk is therefore bounded: an attacker can read only files accessible to the AIStore target process, not necessarily achieve full system compromise, and exposure depends on the AIStore Promote API endpoint being network-reachable. Net assessment: a legitimate patch-worthy issue for any internet- or cluster-exposed AIStore deployment, but closer to 'high CVSS, moderate real-world risk' absent evidence of exploitation; EPSS and KEV data are missing and should be checked before final prioritization.

An attacker with network reachability to an AIStore cluster's Promote API sends a crafted request specifying an absolute source path (e.g. /etc/passwd or a credentials/config file) outside the intended object namespace. Because the endpoint requires no authentication (PR:N) and the attack is low-complexity (AC:L), the AIStore process reads and returns the targeted file's contents, disclosing sensitive data readable by that process. No public exploit code is referenced in the available data.