CVE-2026-65170: SSRF
Published Oct 13, 2026
·Updated
NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.
Affected Software
1 affected component
Nvidia AIStore for Linux
Event History
Oct 13, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments should be prioritized for assessment?
Prioritize NVIDIA AIStore for Linux deployments that use the experimental HT backend, as the vulnerability is identified in that component.
2
What does an attacker need to exploit this issue?
An attacker can be unauthenticated and remote. Exploitation requires supplying a crafted original URL to trigger server-side request forgery.
3
What is the documented impact of successful exploitation?
Successful exploitation may allow information disclosure.