NVIDIA AIStore Framework: Server-side request forgery in dSort
Summary
NVIDIA AIStore for Linux contains a server-side request forgery (SSRF) flaw in the distributed sort (dSort) component. An attacker who can supply a crafted external key map URL can make the server send requests to destinations of the attacker's choice, which may lead to information disclosure. The CNA rates the CVSS 3.1 base score at 8.6 with no privileges or user interaction required, but NVD has not yet completed its analysis and other sources give lower scores.
Affected
- NVIDIA AIStore framework, versions 0 to 4.9 (per CNA record; default: unaffected)
- One aggregator lists "1.0.0"; this could not be verified and is not used.
Fixed in
- Unconfirmed: third-party reports name AIStore 5.0 as the fixed release. Verify against NVIDIA Security Bulletin 5889 before relying on it.
Workaround
Unknown.
Exploitation
- CISA SSVC: Exploitation none, Automatable yes, Technical Impact partial.
- No public exploitation has been confirmed in the sources reviewed.
Our recommendation
- Check whether AIStore versions 0 to 4.9 are in use, including on Kubernetes nodes.
- Confirm the fixed version in NVIDIA Security Bulletin 5889 and upgrade as soon as possible.
- Until patched, restrict outbound network access from AIStore nodes and limit who can submit dSort jobs.
- Monitor logs for dSort requests with unusual external key map URLs.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- NVIDIA Security Bulletin 5889 github.com
- NVD: CVE-2026-65101 nvd.nist.gov
- CVE Record: CVE-2026-65101 www.cve.org
- Strix: CVE-2026-65101 www.strix.ai
- CISA ADP via HOL Guard hol.org
- VulDB: CVE-2026-65101 vuldb.com
- Rapid7 via Vulners: CVE-2026-65101 vulners.com
- NVIDIA AIStore dSort documentation github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 08:34.
Original description (NVD)
NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.