The NVIDIA Infrastructure Controller for Linux contains a vulnerability identified as CVE-2026-65127, categorized under CWE-1258 (Exposure of Sensitive System Information). This flaw arises because debug information is not properly cleared, potentially allowing an attacker with local, high-privilege access to obtain sensitive system information. The CVSS 3.1 base score is 4.1, reflecting a medium severity with high attack complexity and required privileges. No vendor advisory or patch information is provided, and no known exploits are reported.

Successful exploitation could lead to disclosure of sensitive system information. The vulnerability does not affect system integrity or availability. The attack requires local access with high privileges and has high attack complexity, limiting the likelihood of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users with high privileges and monitor for unusual activity related to the Infrastructure Controller.