CVE-2026-24204

MediumCVSS 6.5

Published: 28/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

30th percentile - higher than 30% of all known CVEs

Summary

NVIDIA Flare SDK contains a vulnerability where an attacker may cause Improper Input Validation by path traversing. A successful exploit may lead to information disclosure.

Risk Assessment

The vulnerability could allow an attacker to access sensitive information stored on the system, posing a risk to data confidentiality.

Recommendation

Update NVIDIA Flare SDK to the latest patched version. In the meantime, consider restricting access to the SDK from untrusted sources.

Other vulnerabilities in NVIDIA Flare SDK

CVE-2026-24186High
NVIDIA FLARE SDK contains a vulnerability in FOBS, allowing an attacker to cause deserialization of untrusted data by sending a malicious FOBS-encoded message. A successful exploit of this vulnerability might lead to code execution.

Original NVD description (English source)

NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS