Path Traversal Vulnerability in NVIDIA AIStore for Linux

CVE-2026-65164

What is CVE-2026-65164?

NVIDIA AIStore for Linux is susceptible to a path traversal vulnerability in its dSort archive extraction component. This flaw allows for improper restriction of file paths, enabling a remote attacker to manipulate archive member names. A successful attack could result in arbitrary file creation or overwriting, posing risks such as unauthorized code execution, potential information disclosure, data tampering, and disruption of service. Immediate action and mitigation measures are recommended to safeguard against these vulnerabilities.

References