Server-Side Request Forgery Vulnerability in NVIDIA AIStore for Linux

CVE-2026-65101

What is CVE-2026-65101?

NVIDIA AIStore for Linux is prone to a server-side request forgery vulnerability within its distributed sort component. An attacker could exploit this vulnerability by supplying a carefully crafted external key map URL, potentially leading to unauthorized information disclosure. The situation raises significant concerns regarding the integrity of sensitive data handled by the application. It is crucial for users of NVIDIA AIStore to assess their exposure and implement appropriate security measures.

References