CVE-2026-47612
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.
Risk Assessment
Risk of disclosure of files from restricted directories, potentially exposing the organization to data leakage.
Recommendation
Install patches from NVIDIA for the image loading component and restrict access to image loading functionality.
Other vulnerabilities in NVIDIA Dynamo
See all- CVE-2026-24254Critical
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
- CVE-2026-47623High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit might lead to denial of service and data tampering.
- CVE-2026-47622Medium
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
- CVE-2026-47621Medium
Vulnerability in NVIDIA Dynamo for Linux involving a race condition in the LoRA manager singleton initialization. Successful exploitation could lead to denial of service and data tampering.
- CVE-2026-47620Medium
Vulnerability in NVIDIA Dynamo for Linux involving a race condition in the LoRA manager singleton initialization. Successful exploitation could lead to data tampering and denial of service.
- CVE-2026-47619Medium
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit might lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-47618High
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit might lead to information disclosure.
- CVE-2026-47617High
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit might lead to information disclosure.
- CVE-2026-47616High
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit might lead to information disclosure.
- CVE-2026-47615High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
Original NVD description (English source)
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.