Information Disclosure Vulnerability in NVIDIA AIStore for Linux

CVE-2026-65161

What is CVE-2026-65161?

NVIDIA AIStore for Linux contains a vulnerability in the Promote API that could allow an unauthenticated remote attacker to disclose sensitive information. By supplying a specifically crafted absolute source path, an attacker may gain access to files that are normally restricted to the target process. If exploited, this weakness could lead to unauthorized file reading, raising significant security concerns for affected installations.

References