by Kastro
Paper/Archive/CVE-2026-65162

CVE-2026-65162

NVIDIA AIStore framework — NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may sup…

EPSS 0.7%CVSS 10.0
critical.is priorityof 100
40
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 51.5.515 × 2010.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

Affected

ProductAffectedFixed inSource
AIStore framework0 to 4.9–CNA

Scores by source

nvidia (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-65162refcve.org/CVERecord?id=CVE-2026-65162refgithub.com/NVIDIA/product-security/tree/main/2026/5889