CVE-2026-24255
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit might lead to data tampering.
Risk Assessment
An attacker can tamper with cached data, potentially leading to incorrect results or data integrity compromise.
Recommendation
Update NVIDIA Dynamo to a patched version. Monitor data integrity and restrict system access.
Other vulnerabilities in NVIDIA Dynamo
See all- CVE-2026-24254Critical
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
- CVE-2026-47623High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit might lead to denial of service and data tampering.
- CVE-2026-47622Medium
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
- CVE-2026-47621Medium
Vulnerability in NVIDIA Dynamo for Linux involving a race condition in the LoRA manager singleton initialization. Successful exploitation could lead to denial of service and data tampering.
- CVE-2026-47620Medium
Vulnerability in NVIDIA Dynamo for Linux involving a race condition in the LoRA manager singleton initialization. Successful exploitation could lead to data tampering and denial of service.
- CVE-2026-47619Medium
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit might lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-47618High
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit might lead to information disclosure.
- CVE-2026-47617High
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit might lead to information disclosure.
- CVE-2026-47616High
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit might lead to information disclosure.
- CVE-2026-47615High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
Original NVD description (English source)
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.