CVE-2026-65162: Critical severity Nvidia AIStore for Linux vulnerability
Published Oct 13, 2026
·Updated
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.
Affected Software
1 affected component
Nvidia AIStore for Linux
Event History
Oct 13, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network, has low attack complexity, and requires neither prior privileges nor user interaction.
2
Can the impact extend beyond the initially vulnerable component?
Yes. The CVSS vector indicates a changed scope, meaning a successful exploit can affect resources beyond the security authority of the vulnerable component.