Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

NVIDIA AIStore for Linux can allow attacker code execution

CVE-2026-65162 · published 5 days ago
Summary

The AIStore software for Linux includes an old API that lets a remote user set unsafe container settings. If exploited, the attacker could run code, gain higher privileges, view or change data, and disrupt services. Update the software or disable the legacy API to protect your systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nvidia aistore framework 0 to 4.9
Original advisory text
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security setting...
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-250Execution with Unnecessary Privileges
Timeline
Published13 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Sources
CVE-2026-65162 · NVD
CVE-2026-65162 · MITRE
Track software like this
Free during beta