Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-65121: NVIDIA Linux controller can be bypassed for unauthorized access

CVE-2026-65121 · published 1 month ago

Summary

The NVIDIA Infrastructure Controller for Linux may let an attacker skip proper login checks. This could allow them to gain higher system rights, view confidential data, or alter files. Apply the latest NVIDIA update or patch to restore correct authentication checks.

What to do

Update nvidia infra_controller to version 2.0.0 or later.

Affected software

Vendor	Product	Affected versions
nvidia	infrastructure controller	0 to 1.9
nvidia	infra_controller	< 2.0.0 `cpe:2.3:a:nvidia:infra_controller::::::::`

Original advisory text

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalat...

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering.

References

https://github.com/NVIDIA/product-security/tree/main/2026/5879 Patch
https://nvd.nist.gov/vuln/detail/CVE-2026-65121 US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-65121 Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-287Improper Authentication

Timeline

Published22 Sep 2026

Updated4 Nov 2026

First seen22 Sep 2026

Sources

CVE-2026-65121 · NVD

CVE-2026-65121 · MITRE

Track software like this

Free during beta