CVE-2026-47620
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Vulnerability in NVIDIA Dynamo for Linux involving a race condition in the LoRA manager singleton initialization. Successful exploitation could lead to data tampering and denial of service.
Risk Assessment
Risk of unauthorized data modification and service disruption, potentially compromising system integrity and availability.
Recommendation
Apply patches provided by NVIDIA. Restrict system access and monitor for unusual behavior.
Other vulnerabilities in NVIDIA Dynamo
See all- CVE-2026-24254Critical
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
- CVE-2026-47623High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit might lead to denial of service and data tampering.
- CVE-2026-47622Medium
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
- CVE-2026-47621Medium
Vulnerability in NVIDIA Dynamo for Linux involving a race condition in the LoRA manager singleton initialization. Successful exploitation could lead to denial of service and data tampering.
- CVE-2026-47619Medium
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit might lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-47618High
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit might lead to information disclosure.
- CVE-2026-47617High
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit might lead to information disclosure.
- CVE-2026-47616High
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit might lead to information disclosure.
- CVE-2026-47615High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
- CVE-2026-47614High
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
Original NVD description (English source)
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service.