by Kastro
Paper/Archive/CVE-2026-24178

CVE-2026-24178

NVIDIA FLARE SDK — NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may…

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 47.4.474 × 209.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.

Affected

ProductAffectedFixed inSource
FLARE SDKAll versions prior to 2.7.2–CNA

Scores by source

nvidia (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-24178refcve.org/CVERecord?id=CVE-2026-24178refnvidia.custhelp.com/app/answers/detail/a_id/5819