CVE-2026-47612
7.5 HIGHpublic exploit availablePublished 2026-08-04 · Updated 2026-08-07
AI risk analysis
- Summary
- The vulnerability allows an attacker to improperly limit a pathname in the image loading component of NVIDIA Dynamo for Linux, potentially leading to information disclosure.
- Exploitability
- Exploitation requires access to the image loading process and knowledge of the restricted directory structure; it is moderately difficult.
- Blast radius
- If exploited, this could result in unauthorized access to sensitive files on the system.
- Prioritized remediation
- Update NVIDIA Dynamo for Linux to the latest version that addresses the vulnerability.
information-disclosurenvidialinux
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Vendors
nvidia, linux
Products
dynamo, linux kernel
Public exploit & PoC references
References
- https://github.com/NVIDIA/product-security/tree/main/2026/5842 Product
- https://nvd.nist.gov/vuln/detail/CVE-2026-47612 Third Party Advisory, US Government Resource
- https://www.cve.org/CVERecord?id=CVE-2026-47612 Third Party Advisory
Data: NVD (public domain). Analysis: local $0 model. Defensive use only.