CVE-2026-65162: NVIDIA AIStore Legacy ETL PodSpec Input Vulnerability
CVE-2026-65162 affects NVIDIA AIStore for Linux and concerns a legacy ETL Kubernetes PodSpec initialization API that can accept host-namespace and container-security settings from a remote party. The CVE record rates it critical with a CVSS 3.1 base score of 10, and no fixed version is listed in the sources reviewed. No confirmed exploitation in the wild appears in the consulted sources.
Overview
CVE-2026-65162 affects NVIDIA AIStore for Linux. According to the CVE record, the flaw is in a legacy ETL Kubernetes PodSpec initialization API that accepts host-namespace and container-security settings from a remote party. The record lists the severity as critical with a CVSS 3.1 base score of 10 from the CNA and other providers.
Impact
The record states that a successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service. The assigned weakness is CWE-250, Execution with Unnecessary Privileges. The CVSS vector in the record describes a network-reachable issue requiring no privileges and no user interaction, with high confidentiality, integrity and availability impact and a changed scope.
Affected products and versions
- Product: NVIDIA AIStore framework
- Range listed in the record: up to and including 4.9
The record lists no fixed version. This does not mean no fix exists; it means the available data does not identify one.
Exploitation status
The CVE record shows this CVE is not listed in the CISA KEV catalog. No confirmed exploitation in the wild appears in the sources consulted for this analysis. The SSVC fields in the record include exploitation set to none and automatable set to yes, which are scoring inputs rather than evidence of attacks. No EPSS score is available in the record.
Remediation and mitigation
- Inventory all AIStore deployments and their versions, including any ETL components.
- Follow the guidance in the NVIDIA product security advisory referenced by the record, and apply an updated release once NVIDIA identifies one for your version.
- Until a fix is confirmed, restrict network access to AIStore and ETL management interfaces to trusted sources only.
- Review Kubernetes security settings for ETL workloads and reduce host namespace sharing, privileged mode and added capabilities to the minimum required.
- Apply least-privilege principles to service accounts that can create or modify pods.
Detection guidance
- Audit creation and modification of pods and PodSpecs in namespaces used by AIStore ETL.
- Alert on pods requesting host network, host PID or IPC namespaces, privileged containers or added Linux capabilities.
- Review API logs for ETL initialization requests from unexpected sources or identities.
Limitations of the available information
The record does not include a fixed version, an EPSS score, technical details from the vendor beyond the description, or any vendor statement on exploitation. The source status is Awaiting Analysis, so the affected version boundary should be confirmed against the NVIDIA advisory before making decisions.
Frequently asked questions
What is CVE-2026-65162?
It is a critical vulnerability in NVIDIA AIStore for Linux involving a legacy ETL Kubernetes PodSpec initialization API that can accept host-namespace and container-security settings from a remote party.
Is there a fixed version?
The CVE record does not list a fixed version. Check the NVIDIA product security advisory referenced in the record for current guidance.
Is this vulnerability being actively exploited?
This CVE is not listed in the CISA KEV catalog, and no confirmed exploitation in the wild appears in the sources consulted for this analysis.
What should administrators do now?
Inventory AIStore and ETL deployments, restrict network access to management interfaces, reduce Kubernetes privileges for ETL workloads, and monitor pod changes while awaiting a confirmed fix.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.