NVIDIA Aistore Framework vulnerabilities

9 CVEs affecting NVIDIA Aistore Framework, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-65173, published 2026-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-65103, published 2026-10-13. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to…
CVE-2026-24270, published 2026-07-01. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges,…
CVE-2026-65164, published 2026-10-13. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted…
CVE-2026-65161, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source…
CVE-2026-65162, published 2026-10-13. Critical severity, CVSS 10.0. EPSS: 0.7% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.…
CVE-2026-65173, published 2026-10-13. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A…
CVE-2026-65170, published 2026-10-13. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A…
CVE-2026-65172, published 2026-10-13. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control…
CVE-2026-65101, published 2026-10-13. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful…