NVIDIA Dynamo for Linux contains a CWE-22 path traversal vulnerability in its image loading component. This flaw allows an attacker to improperly limit a pathname to a restricted directory, potentially enabling unauthorized access to sensitive information. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to network attack vector, low attack complexity, no privileges required, no user interaction, and impact on confidentiality only. No vendor advisory or patch information is currently available, and no exploits are known in the wild.

An attacker exploiting this vulnerability could cause information disclosure by accessing files outside of intended restricted directories. There is no indication of integrity or availability impact. The vulnerability does not require privileges or user interaction, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor official NVIDIA communications for updates and consider restricting access to the affected component if possible.