CVE-2026-65173

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote at

Published: —
Last modified: —
Status: published
Known exploitation: Not listed in CISA KEV
Public exploit: None on Exploit-DB

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial

Decision points from CISA's Vulnrichment, assessed — (SSVC 2.0.3).

Summary

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

Affected versions

NVIDIA AIStore framework
0 to 4.9

References 3

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote at

Summary

Affected versions

References 3

nvd.nist.gov

cve.org

GitHub · NVIDIA/product-security