Server-Side Request Forgery Issue in NVIDIA AIStore for Linux

CVE-2026-65170

What is CVE-2026-65170?

NVIDIA AIStore for Linux has a vulnerability in its experimental HT backend that allows an unauthenticated remote attacker to exploit server-side request forgery. By providing a specially crafted URL, the attacker could manipulate server responses, potentially leading to unauthorized information disclosure. This issue emphasizes the importance of securing input validations and ensuring that server configurations are robust against such exploitative tactics.

References