Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Priority MEDIUM 43

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00692 Published 2026-08-04 No fix listed CWE-502
Priority LOW 30

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00459 Published 2026-08-04 No fix listed CWE-209
Priority LOW 29

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00415 Published 2026-08-04 No fix listed CWE-367
TI-2026-35131 CVE-2026-47620 · GHSA-cw8w-568w-v2v5

Race condition in NVIDIA Dynamo

Priority LOW 29

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00415 Published 2026-08-04 No fix listed CWE-362
TI-2026-35129 CVE-2026-47618 · GHSA-25vv-hwhq-wjg6

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35128 CVE-2026-47617 · GHSA-h44j-2vgw-q5f2

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35127 CVE-2026-47616 · GHSA-65pc-qfwh-rrgx

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35126 CVE-2026-47615 · GHSA-hc3w-j3wp-q93q

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35125 CVE-2026-47614 · GHSA-3q7g-m267-rp98

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35124 CVE-2026-47613 · GHSA-prwc-w88m-jpv7

Server-side request forgery in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-08-04 No fix listed CWE-918
TI-2026-35123 CVE-2026-47612 · GHSA-xc5r-xx6g-q3cj

Path traversal in NVIDIA Dynamo

Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0082 Published 2026-08-04 No fix listed CWE-22
Priority MEDIUM 40

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-08-04 No fix listed CWE-1023
TI-2026-19555 CVE-2026-24254 · GHSA-4gq3-gh66-qq8g

Authentication bypass in NVIDIA Dynamo

Priority MEDIUM 51

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00889 Published 2026-08-04 No fix listed CWE-288
TI-2026-19554 CVE-2026-24253 · GHSA-5c7q-rvp2-6mxc

Out-of-bounds write in NVIDIA Dynamo

Priority MEDIUM 43

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00641 Published 2026-08-04 No fix listed CWE-787