Server-Side Request Forgery in NVIDIA Dynamo for Linux Media Fetcher
CVE-2026-47618

7.5HIGH

Key Information:

Vendor

Nvidia
Status
Dynamo
Vendor
CVE Published:
4 August 2026

What is CVE-2026-47618?

NVIDIA Dynamo for Linux has a vulnerability in its Rust multimodal media fetcher, allowing attackers to exploit server-side request forgery. This vulnerability can potentially lead to unauthorized access and information disclosure, raising security concerns for affected users.

Affected Version(s)

Dynamo Linux 0 to v1.1.0

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47618
https://www.cve.org/CVERecord?id=CVE-2026-47618
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.