CVE-2026-65101: SSRF
NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The supplied severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required. Exploitation involves providing a crafted external key map URL to the distributed sort component.
What is the expected impact of successful exploitation?
Successful exploitation may cause server-side request forgery and lead to information disclosure. The supplied vector indicates high confidentiality impact, with no integrity or availability impact stated.
Which deployments should be prioritized for review?
Prioritize NVIDIA AIStore for Linux deployments that use the distributed sort component and accept or process external key map URLs. The provided data does not identify affected versions, default configuration status, or available mitigations.