NVIDIA vulnerabilities
We track 582 vulnerabilities in NVIDIA products across 60+ products. 582 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest NVIDIA vulnerabilities
- 9.9 Critical severity
OpenShell: Incomplete List of Disallowed Inputs
NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, infor
- 7.8 High severity
NemoClaw: Improper Control of Generation of Code
NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of servi
- 9.8 Critical severity
NemoClaw: Download of Code Without Integrity Check
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, inform
- 8.2 High severity
DGX Spark: Out-of-bounds Write
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, inf
- 8.2 High severity
DGX Spark: NULL Pointer Dereference
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service,
- 8.2 High severity
DGX Spark: Out-of-bounds Write
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, inf
- 8.8 High severity
Unified Fabric Manager Enterprise - GA: Improper Authentication
NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to co
- 8.0 High severity
Unified Fabric Manager Enterprise - GA: Improper Neutralization of Special Elements used in a Command
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution,
- 7.5 High severity
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.
- 7.5 High severity
Triton Inference Server: Allocation of Resources Without Limits or Throttling
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service.
- 9.8 Critical severity
Triton Inference Server: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.
- 9.1 Critical severity
Triton Inference Server: Absolute Path Traversal
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.
- 7.1 High severity
NVOS: Authentication Bypass Using an Alternate Path or Channel
NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for repla
- 8.8 High severity
Cumulus Linux GA: Buffer Copy without Checking Size of Input
NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulner
- 7.8 High severity
Cumulus Linux GA: Execution with Unnecessary Privileges
NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.
- 8.2 High severity
Dynamo: Deserialization of Untrusted Data
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.
- 8.1 High severity
Dynamo: Reliance on Insufficiently Trustworthy Component
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
- 7.5 High severity
Dynamo: Server-Side Request Forgery
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
- 7.5 High severity
Dynamo: Server-Side Request Forgery
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.
- 7.5 High severity
Dynamo: Server-Side Request Forgery
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
- 7.5 High severity
Dynamo: Server-Side Request Forgery
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.
- 7.5 High severity
Dynamo: Server-Side Request Forgery
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
- 7.5 High severity
Dynamo: Server-Side Request Forgery
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to informa
- 7.5 High severity
Dynamo: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.
- 7.1 High severity
Triton Inference Server: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vu
- 7.5 High severity
Dynamo: Incomplete Comparison with Missing Factors
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vuln
- 9.8 Critical severity
Dynamo: Authentication Bypass Using an Alternate Path or Channel
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial
- 8.2 High severity
Dynamo: Out-of-bounds Write
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.
- 8.2 High severity
DCGM: Allocation of Resources Without Limits or Throttling
NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerabili
- 7.8 High severity
NeMo Framework: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.
- 7.4 High severity
TensorRT-LLM: Write-what-where Condition
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.
- 7.8 High severity
TensorRT-LLM: Deserialization of Untrusted Data
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, da
- 7.5 High severity
TensorRT-LLM: Heap-based Buffer Overflow
NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of s
- 7.8 High severity
TensorRT: Heap-based Buffer Overflow
NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution.
- 7.8 High severity
TensorRT: Heap-based Buffer Overflow
NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.
- 7.8 High severity
TensorRT: Improper Validation of Array Index
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.
- 8.4 High severity
TensorRT-LLM: Deserialization of Untrusted Data
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might le
- 7.3 High severity
TensorRT-LLM: Missing Authentication for Critical Functionality
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability migh
- 9.8 Critical severity
TensorRT: Deserialization of Untrusted Data
NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.
- 7.5 High severity
Triton Inference Server: Missing Release of Memory after Effective Lifetime
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.