Missing Authentication Vulnerability in NVIDIA AIStore for Linux
CVE-2026-65173

9.1CRITICAL

Key Information:

Vendor

Nvidia
Status
Aistore Framework
Vendor
CVE Published:
13 October 2026

What is CVE-2026-65173?

A significant security vulnerability exists in NVIDIA AIStore for Linux, where the token-revocation endpoint lacks proper authentication. This flaw allows an unauthenticated remote attacker to submit manipulated token-revocation lists. If exploited, this could lead to serious consequences, including data tampering and denial of service, compromising the integrity and availability of the affected systems.

Affected Version(s)

AIStore framework Linux 0 to 4.9

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65173
https://www.cve.org/CVERecord?id=CVE-2026-65173
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.