CVE-2022-21822: NVIDIA Federated Learning Application Runtime Environment

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.

Affected products

• NVIDIA Federated Learning Application Runtime Environment: before 2.0.16 (fixed in 2.0.16)

Published 2022-03-17. Last modified 2026-06-17.