NVIDIA AIStore: Path traversal in dSort archive extraction
Summary
NVIDIA AIStore contains a path traversal flaw in the dSort archive extraction component. A remote attacker can supply crafted archive member names to a dSort job so that files are written outside the intended directory. A successful attack may allow arbitrary file creation or overwrite, code execution, information disclosure, data tampering and denial of service.
Affected
- AIStore 0 through 4.9 (CNA data; the default state is unaffected)
- Whether dSort job submission requires authentication is not stated in the sources reviewed.
Fixed in
- AIStore 5.0 according to secondary sources (Securityonline, Qovery). Not yet confirmed in NVIDIA bulletin 5889.
- CISA ADP Vulnrichment (via a third-party mirror) lists the fixed version as "Not reported".
Workaround
- Keep AIStore proxies and targets off public networks and restrict access to their APIs.
- Apply network-level restrictions such as a default-deny NetworkPolicy in Kubernetes as a stopgap. This is a general pattern, not a tested fix for this CVE.
- No vendor-specific workaround for dSort has been found.
Exploitation
- NVIDIA reports no exploitation in the wild.
- Not listed as known exploited (KEV: No).
- No public proof-of-concept has been confirmed.
- EPSS is about 0.008 (low). CISA SSVC: Automatable no, Technical Impact total.
Our recommendation
- Check whether any AIStore instance (version 0 to 4.9) is in use, including Kubernetes clusters.
- Keep AIStore off public networks and restrict API access now.
- Confirm the fixed version in NVIDIA bulletin 5889 and upgrade.
- Patch related flaws in the same bulletin (CVE-2026-65103, CVE-2026-65161, CVE-2026-65162) at the same time.
- Monitor NVD and CISA for status changes, since NVD analysis is still pending.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- NVIDIA Security Bulletin 5889 (GitHub) github.com
- NVD: CVE-2026-65164 nvd.nist.gov
- CVE Record: CVE-2026-65164 www.cve.org
- Securityonline: NVIDIA AIStore vulnerabilities securityonline.info
- Qovery: AIStore PodSpec CVE exposure check and remediation www.qovery.com
- CISA ADP Vulnrichment mirror (hol.org) hol.org
- Strix: CVE-2026-65164 www.strix.ai
- Rapid7 via Vulners: CVE-2026-65164 vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 19:44.
Original description (NVD)
NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.