CVE-2026-65172

8.6 Élevée

Publiée le 13/10/2026 à 15:17 · Modifiée le 13/10/2026 à 18:18 · En attente d'analyse NVD · Source : psirt@nvidia.com

Description

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.

Traduire en français

Produits concernés

NVIDIA AIStore framework

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.6 Élevée	psirt@nvidia.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L`

Faiblesses (CWE)

CWE-862

Références

https://github.com/NVIDIA/product-security/tree/main/2026/5889
https://nvd.nist.gov/vuln/detail/CVE-2026-65172
https://www.cve.org/CVERecord?id=CVE-2026-65172

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories