NVIDIA Nvflare vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting NVIDIA Nvflare: 3 record(s), with affected versions and fixes.
cpe:2.3:a:nvidia:nvflare

CVE-2026-24204 Medium · 6.5 CWE-20 Apr 28, 2026

Improper Input Validation in NVIDIA Nvflare

NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.

CVE-2026-24186 High · 8.8 CWE-502 Apr 28, 2026

Deserialization of Untrusted Data in NVIDIA Nvflare

NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.

CVE-2026-24178 Critical · 9.8 CWE-639 Apr 28, 2026

Authorization Bypass Through User-Controlled Key (IDOR) in NVIDIA Nvflare

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.