NVIDIA AIStore: Path traversal in target object rename handler
Summary
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler (CWE-22). An unauthenticated remote attacker who can reach an AIStore target directly can submit a crafted rename destination and create or overwrite arbitrary files. According to the CNA, successful exploitation might lead to code execution, privilege escalation, information disclosure, data tampering and denial of service; the attack complexity is rated high.
Affected
- NVIDIA AIStore framework, versions 0 to 4.9 (according to the CNA record; to be verified against the NVIDIA bulletin)
Fixed in
- Upgrade to version 5.0 (according to a news article; not yet confirmed in the NVIDIA bulletin)
Workaround
- Unknown. No official workaround published.
- Restrict network access to AIStore proxies and targets to trusted internal networks only.
- Do not expose AIStore APIs or target ports to the internet.
Exploitation
- NVIDIA does not report exploitation in the wild.
- No public proof of concept confirmed.
- Not listed in CISA KEV; CISA ADP Vulnrichment does not mark it as known exploited.
- EPSS: 0.009.
Our recommendation
- Check whether any AIStore deployment exists, including Kubernetes clusters and AI/ML lab environments.
- If present, confirm affected versions in NVIDIA bulletin 5889 and upgrade to the fixed release.
- Until patched, restrict access to AIStore targets and proxies to trusted internal networks.
- Patch the other AIStore CVEs published on 2026-10-13 in the same batch together.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- NVIDIA Security Bulletin 5889 (GitHub) github.com
- NVD: CVE-2026-65103 nvd.nist.gov
- CVE Record: CVE-2026-65103 www.cve.org
- VulDB: CVE-2026-65103 vuldb.com
- Security news: NVIDIA AIStore vulnerabilities securityonline.info
- CISA ADP Vulnrichment summary (HOL Guard) hol.org
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 19:44.
Original description (NVD)
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.