NVIDIA Dynamo vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NVIDIA Dynamo: 15 record(s), with affected versions and fixes.cpe:2.3:a:nvidia:dynamo
CVE-2026-47623
High · 8.2
CWE-502 Aug 4, 2026
Deserialization of Untrusted Data in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.
CVE-2026-47622
Medium · 5.3
CWE-209 Aug 4, 2026
Information Exposure Through an Error Message in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47621
Medium · 6.5
CWE-367 Aug 4, 2026
TOCTOU Race Condition in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering.
CVE-2026-47620
Medium · 6.5
CWE-362 Aug 4, 2026
Race Condition in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service.
CVE-2026-47619
High · 8.1
CWE-1357 Aug 4, 2026
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker…
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
CVE-2026-47618
High · 7.5
CWE-918 Aug 4, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47617
High · 7.5
CWE-918 Aug 4, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47616
High · 7.5
CWE-918 Aug 4, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47615
High · 7.5
CWE-918 Aug 4, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47614
High · 7.5
CWE-918 Aug 4, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47613
High · 7.5
CWE-918 Aug 4, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-47612
High · 7.5
CWE-22 Aug 4, 2026
Path Traversal in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24255
High · 7.5
CWE-1023 Aug 4, 2026
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache…
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.
CVE-2026-24254
Critical · 9.8
CWE-288 Aug 4, 2026
Authentication Bypass Using an Alternate Path or Channel in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
CVE-2026-24253
High · 8.2
CWE-787 Aug 4, 2026
Out-of-bounds Write in NVIDIA Dynamo
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.