[CVE-2026-65173] NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation end…

Descripción técnica

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Debilidades (CWE)

CWE-306

Fuente oficial

Publicado en NIST NVD.