CVE-2026-65173: NVIDIA Aistore Framework

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

Affected products

• NVIDIA Aistore Framework

Published 2026-10-13. Last modified 2026-10-13.