Authorization Bypass Vulnerability in NVIDIA NVFlare Dashboard

CVE-2026-24178

What is CVE-2026-24178?

The NVIDIA NVFlare Dashboard has a vulnerability in its user management and authentication system. This flaw allows unauthenticated attackers to potentially bypass authorization through a user-controlled key. Exploiting this vulnerability could lead to various serious impacts including privilege escalation, unauthorized access to sensitive data, data tampering, arbitrary code execution, and could also result in service disruptions. Organizations utilizing this software should ensure they are aware of this issue and take necessary measures to mitigate potential risks.

References