Vulnerability in NVIDIA NVSentinel for Linux Exposes Unauthenticated Interface
CVE-2026-65131

6MEDIUM

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
13 October 2026

What is CVE-2026-65131?

A vulnerability exists in NVIDIA NVSentinel for Linux within the platform-connectors component. This issue arises from the gRPC health-event interface being exposed over a world-writable Unix domain socket, which lacks necessary authentication controls. An attacker exploiting this vulnerability can potentially cause disruption to services, resulting in a denial of service. Ensuring proper security measures and access controls is critical to mitigate risks associated with this vulnerability.

Affected Version(s)

NVSentinel All 1.19.0

References

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.