Server-Side Request Forgery in NVIDIA NeMo Export-Deploy Leading to Information Disclosure

CVE-2026-100962

What is CVE-2026-100962?

NVIDIA NeMo Export-Deploy contains a vulnerability in its multimodal deployment feature that allows an attacker to exploit server-side request forgery. If successfully exploited, this vulnerability may lead to unauthorized information disclosure, potentially compromising sensitive data. Users of the affected product should take immediate precautions to secure their deployments and ensure that they are protected against such vulnerabilities.

References