← Vulnerability feed

Vulnerability record · CVE-2026-47613 · published 4 August 2026

CVE-2026-47613: Nvidia dynamo server-side request forgery (ssrf) vulnerability

Nvidia · Dynamo

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.

7.5 CVSS 3.1 High EPSS 0.56% · top 55.5% CWE-918 · Server-side request forgery (SSRF)
7.5CVSS 3.1 base score
0.56%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
7 Aug 2026Last modified by NVD

Description

NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/NVIDIA/product-security/tree/main/2026/5842 Product
https://nvd.nist.gov/vuln/detail/CVE-2026-47613 Third Party AdvisoryUS Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-47613 Third Party Advisory

Track CVE-2026-47613 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-24254Nvidia dynamo authentication bypass via alternate path vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successf…EPSS 0.89%8.2CVE-2026-47623Nvidia dynamo deserialization of untrusted data vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulner…EPSS 0.69%8.2CVE-2026-24253Nvidia dynamo out-of-bounds write vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability mig…EPSS 0.64%8.1CVE-2026-47619Nvidia dynamo vulnerabilityNVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vul…EPSS 0.77%7.5CVE-2026-47616Nvidia dynamo server-side request forgery (ssrf) vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successfu…EPSS 0.56%7.5CVE-2026-47617Nvidia dynamo server-side request forgery (ssrf) vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebi…EPSS 0.56%7.5CVE-2026-47618Nvidia dynamo server-side request forgery (ssrf) vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A su…EPSS 0.56%7.5CVE-2026-24255Nvidia dynamo vulnerabilityNVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting imag…EPSS 0.55%

Source: NIST National Vulnerability Database (record CVE-2026-47613), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.