AF
Product
AIStore framework
9
CVEs
0
On KEV
10.0
Max CVSS
8
New 30D
Severity mix
Critical 3High 6Medium 0Low 0
Watch
Add AIStore framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65162 | 10.0 | Oct 13 | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and… Affected: 0 to 4.9 |
| CVE-2026-24270 | 9.8 | Jul 1 | NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication Affected: 0 - 4.4 |
| CVE-2026-65173 | 9.1 | Oct 13 | NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted… Affected: 0 to 4.9 |
| CVE-2026-65172 | 8.6 | Oct 13 | NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL… Affected: 0 to 4.9 |
| CVE-2026-65101 | 8.6 | Oct 13 | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key… Affected: 0 to 4.9 |
| CVE-2026-65170 | 8.6 | Oct 13 | NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a… Affected: 0 to 4.9 |
| CVE-2026-65164 | 8.1 | Oct 13 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname… Affected: 0 to 4.9 |
| CVE-2026-65103 | 8.1 | Oct 13 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper… Affected: 0 to 4.9 |
| CVE-2026-65161 | 7.5 | Oct 13 | NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a… Affected: 0 to 4.9 |
Showing 9