CVE-2026-65173
Received Received - Intake

Missing Authentication in NVIDIA AIStore for Linux

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: NVIDIA Corporation

Description
NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-65173
EUVD
EUVD-2026-98558

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
NVIDIA AIStore framework 0 to 4.9

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA AIStore for Linux has a missing authentication vulnerability in the token-revocation endpoint. An unauthenticated remote attacker can submit crafted token-revocation lists, potentially leading to data tampering and denial of service.

Impact Analysis

This vulnerability may allow attackers to tamper with data or disrupt services by exploiting the token-revocation endpoint without authentication. It could lead to unauthorized changes or system unavailability.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized data tampering or service disruption, potentially breaching GDPR or HIPAA if sensitive data is involved.

Mitigation Strategies

Apply patches or updates from NVIDIA for AIStore to address the missing authentication vulnerability in the token-revocation endpoint. Ensure network segmentation and restrict access to the affected endpoint until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65173. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart