CVE-2026-65103: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in NVIDIA AIStore framework
Description
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
CVSS v3.1
Score 8.1high
Affected software
NVIDIA
AIStore framework
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-65103 is a path traversal vulnerability (CWE-22) in the NVIDIA AIStore framework for Linux. The flaw exists in the target-side object rename handler, where improper limitation of pathnames allows an unauthenticated remote attacker to submit a crafted rename destination to an AIStore target. This can cause arbitrary creation or overwriting of files outside the intended directory scope. The vulnerability has a CVSS 3.1 score of 8.1, indicating high severity, with impacts including code execution, privilege escalation, information disclosure, data tampering, and denial of service.
Potential Impact
Successful exploitation can lead to arbitrary file creation or overwriting, which may enable code execution, escalation of privileges, disclosure of sensitive information, tampering with data, and denial of service conditions on affected systems.
Mitigation Recommendations
No patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- nvidia
- Date Reserved
- 2026-07-21T17:12:22.621Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ace2fcc2cdf04f656649e85
Added to database: 10/13/2026, 13:19:08 UTC
Last enriched: 10/13/2026, 13:33:58 UTC
Last updated: 10/13/2026, 18:57:33 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.