← Back

CVE-2026-24204

nvd nist
Published: Apr 28, 2026Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.

Affected (1)

Products: Nvidia: Nvflare
Nvidia
1 product
Nvflare
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Nvflare
Before 2.7.2
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (3)

Source: psirt@nvidia.com
US Government Resource
Source: psirt@nvidia.com
Vendor Advisory
Source: psirt@nvidia.com
Third Party Advisory

Timeline

No history available yet.