← Vulnerability feed

Vulnerability record · CVE-2026-24254 · published 4 August 2026

CVE-2026-24254: Nvidia dynamo authentication bypass via alternate path vulnerability

Nvidia · Dynamo

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

9.8 CVSS 3.1 Critical EPSS 0.89% · top 42.3% CWE-288 · Authentication bypass via alternate path
9.8CVSS 3.1 base score
0.89%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
7 Aug 2026Last modified by NVD

Description

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/NVIDIA/product-security/tree/main/2026/5842 Product
https://nvd.nist.gov/vuln/detail/CVE-2026-24254 Third Party AdvisoryUS Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-24254 Third Party Advisory

Track CVE-2026-24254 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2026-47623Nvidia dynamo deserialization of untrusted data vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulner…EPSS 0.69%8.2CVE-2026-24253Nvidia dynamo out-of-bounds write vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability mig…EPSS 0.64%8.1CVE-2026-47619Nvidia dynamo vulnerabilityNVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vul…EPSS 0.77%7.5CVE-2026-47616Nvidia dynamo server-side request forgery (ssrf) vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successfu…EPSS 0.56%7.5CVE-2026-47617Nvidia dynamo server-side request forgery (ssrf) vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebi…EPSS 0.56%7.5CVE-2026-47618Nvidia dynamo server-side request forgery (ssrf) vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A su…EPSS 0.56%7.5CVE-2026-24255Nvidia dynamo vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting imag…EPSS 0.55%7.5CVE-2026-47612Nvidia dynamo path traversal vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a re…EPSS 0.82%

Source: NIST National Vulnerability Database (record CVE-2026-24254), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.