Path Traversal Vulnerability in NVIDIA AIStore for Linux

CVE-2026-65103

What is CVE-2026-65103?

NVIDIA AIStore for Linux is susceptible to a path traversal vulnerability within its target-side object rename handler. An unauthenticated remote attacker can exploit this vulnerability by crafting a malicious rename destination directly sent to an AIStore target. This exploitation may lead to unauthorized file creation or modification within restricted directories, potentially facilitating code execution, privilege escalation, information disclosure, data tampering, and denial of service. Mitigating this risk is critical to safeguarding data integrity and system availability.

References