CVE-2026-65173: Critical NVIDIA AIStore Flaw Risks Data Tampering and Denial of Service for All Versions
A critical vulnerability in NVIDIA AIStore allows unauthenticated remote attackers to submit crafted revocation lists, risking data tampering and denial of service.
Key points
- CVE-2026-65173 is rated Critical with a CVSS score of 9.1 by the National Vulnerability Database.
- The flaw affects all versions of NVIDIA AIStore for Linux from version 0 up to 4.9.
- Attackers do not need credentials to exploit the missing authentication in the token-revocation endpoint.
NVIDIA AIStore contains a critical security flaw that allows remote attackers to disrupt services without any form of authentication. According to the National Vulnerability Database, the issue stems from a missing authentication check in the token-revocation endpoint, which permits unauthorized users to submit crafted revocation lists. This vulnerability, identified as CVE-2026-65173, carries a CVSS score of 9.1, placing it in the critical severity range.
In plain English
The vulnerability exists because the system fails to verify who is requesting token revocations. An attacker can send a specially crafted list to the endpoint, forcing the system to revoke tokens that should remain valid. This action can lead to two main outcomes: data tampering and denial of service. Organizations relying on NVIDIA AIStore for Linux must recognize that this flaw affects every version of the framework released so far, from version 0 through 4.9.
The background
The National Vulnerability Database classifies this weakness under CWE-306, which refers to missing authentication for critical functionality. In this specific case, the critical function is the management of token revocations. Because the endpoint does not require valid credentials, any remote actor with network access can manipulate the token state. This lack of protection means that the integrity of the system’s access controls can be compromised by unauthenticated requests, leading to potential service disruption.
What changes now
Security teams must immediately assess their exposure to NVIDIA AIStore for Linux. Since the flaw affects all versions up to 4.9, any deployment using this framework is potentially vulnerable. The risk is significant because the attack vector is remote and does not require prior access or stolen credentials. Organizations should monitor their environments for signs of unauthorized token revocation or unexpected service outages that could indicate exploitation of CVE-2026-65173. No fix has been confirmed yet.
What to do and how to stay safe: NVIDIA
- Inventory all systems running NVIDIA AIStore for Linux and identify the specific version in use.
- Monitor network traffic for unusual requests to the token-revocation endpoint from untrusted sources.
- Implement network segmentation to restrict access to the AIStore framework from external or untrusted networks.
- Prepare incident response plans for potential denial-of-service events or data tampering incidents.
Step-by-step guide: Automatic Updates Mistakes That Leave Systems Exposed
General security guidance from the RedTeam Monitor newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the severity of CVE-2026-65173?
The National Vulnerability Database rates it as Critical with a CVSS score of 9.1.
Which versions of NVIDIA AIStore are affected?
All versions of NVIDIA AIStore for Linux from version 0 up to 4.9 are affected.
Can an attacker exploit this without credentials?
Yes, the vulnerability allows unauthenticated remote attackers to submit crafted token-revocation lists.
