CVE-2026-47613

Published: Aug 4, 2026Modified: Aug 7, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.

Affected (1)

Products: Nvidia: Dynamo

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Dynamo	Up to 1.1.0

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5842

Source: psirt@nvidia.com

Product

https://nvd.nist.gov/vuln/detail/CVE-2026-47613

Source: psirt@nvidia.com

Third Party AdvisoryUS Government Resource

https://www.cve.org/CVERecord?id=CVE-2026-47613

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.