CVE-2026-65172

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend that allows an unauthenticated remote attacker to cause server-side request forgery by supplying a crafted original URL. Successful exploitation may lead to information disclosure.

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component that allows a remote attacker to bypass pathname restrictions by supplying crafted archive member names to a dSort job. Successful exploitation may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.

NVIDIA AIStore for Linux contains a vulnerability in the Promote API that allows an unauthenticated remote attacker to read files accessible to the target process by supplying a crafted absolute source path. Successful exploitation may lead to information disclosure.

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

The NVIDIA AIStore framework contains a vulnerability that allows authentication bypass. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, and data tampering.