CVE-2026-65161: Path Traversal
Published Oct 13, 2026
·Updated
NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure.
Affected Software
1 affected component
Nvidia AIStore for Linux
Event History
Oct 13, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Any unauthenticated remote attacker who can reach the AIStore Promote API may exploit it. No privileges or user interaction are required.
2
What access can an attacker gain?
An attacker may read files that are accessible to the AIStore target process. The reported impact is information disclosure; integrity and availability impact are not indicated.
3
What input is required to exploit the vulnerability?
The attacker must supply a crafted absolute source path to the Promote API. The issue is classified as path traversal.