CVE-2026-24185: High severity Nvidia NVOS vulnerability
NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommended by NVIDIA are not followed, this alternative authentication path might lead to unauthorized access. A successful exploit of this vulnerability might lead to escalation of privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In NVIDIA NVOS, the SSH server configuration component is vulnerable when PKA-only mode is enabled. Disable/turn off PKA-only mode to prevent an alternative authentication path that could be abused for unauthorized access and potential privilege escalation.
NVIDIA NVOS (network switches) SSH server configuration component PKA-only mode = disable (turn off PKA-only mode) - Operational
Follow NVIDIA best practices for replacing the default password, to prevent the alternative authentication path from enabling unauthorized access.
Event History
Frequently Asked Questions
Which deployments are realistically exposed?
Exposure is limited to NVIDIA NVOS network switches where the SSH server is configured with PKA-only mode enabled and an administrator has inadvertently enabled an alternative authentication path. The issue becomes materially exploitable when the default password has not been replaced according to NVIDIA's recommended practice.
What must an attacker have or do to exploit this issue?
An attacker would need to use the alternative authentication path made available by the SSH configuration and rely on the default password still being in place. The published vector also indicates adjacent-network access, high attack complexity, and low privileges are required; no user interaction is required.
What can be done if patching is not immediately possible?
Replace the default password in accordance with NVIDIA's recommended best practices and review the SSH server configuration for alternative authentication paths while PKA-only mode is enabled. These steps address the conditions described as enabling unauthorized access.
How can I determine whether a switch is potentially affected?
Review whether PKA-only mode is enabled on the SSH server, whether an alternative authentication path has been enabled, and whether the default password was replaced. Systems meeting all of those conditions should be treated as potentially affected.