AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-24255

Nvidia Dynamo: tampering

Nvidia

CVE-2026-24255 · Published Aug 4, 2026 · updated Aug 7, 2026

High7.5
No fix yet
Nvidia advisory

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.

Affected versions

PackageAffectedFixed in
Dynamo
Product
<= 0 to v1.1.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-1023

More Nvidia advisories

All Nvidia
High 7.5Aug 4Nvidia Dynamo: server-side request forgeryCVE-2026-47616no fix yetHigh 7.5Aug 4Nvidia Dynamo: server-side request forgeryCVE-2026-47617no fix yetHigh 7.5Aug 4Nvidia Dynamo: server-side request forgeryCVE-2026-47618no fix yetMedium 6.6Aug 4Nvidia Dynamo: code executionCVE-2026-47619no fix yetMedium 6.5Aug 4Nvidia Dynamo: race conditionCVE-2026-47620no fix yetMedium 6.5Aug 4Nvidia Dynamo: race conditionCVE-2026-47621no fix yet