CVE-2026-65173: Critical severity Nvidia AIStore for Linux vulnerability
Published Oct 13, 2026
·Updated
NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.
Affected Software
1 affected component
Nvidia AIStore for Linux
Event History
Oct 13, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need credentials or user interaction to exploit this issue?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What is the practical impact of a successful exploit?
An unauthenticated remote attacker can submit crafted token-revocation lists, which may enable data tampering and denial of service.