CVE-2026-65103: Path Traversal
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
AIStore for Linux deployments are exposed when an attacker can submit requests directly to an AIStore target. The vulnerable functionality is the target-side object rename handler.
Does exploitation require authentication or user interaction?
No. The vulnerability can be exploited by an unauthenticated remote attacker and does not require user interaction, although the attack complexity is rated high.
What can an attacker do after successful exploitation?
An attacker may create or overwrite arbitrary files by supplying a crafted rename destination that escapes the intended restricted directory. Reported impacts include possible code execution, privilege escalation, information disclosure, data tampering, and denial of service.
What conditions are necessary for an exploit attempt?
The attacker needs network access to an AIStore target and must be able to send a crafted object-rename destination directly to that target. The provided information does not state whether any particular default deployment configuration exposes targets in this way.