NVIDIA AIStore: Missing authentication in token-revocation endpoint
Summary
NVIDIA AIStore for Linux contains a missing authentication vulnerability in its token-revocation endpoint. An unauthenticated remote attacker can submit crafted token-revocation lists. A successful attack may lead to data tampering and denial of service. NVD analysis is still pending; the CVSS 3.1 score is 9.1 (CRITICAL).
Affected
- NVIDIA AIStore framework (AIStore for Linux), versions 0 to 4.9, according to the CVE record
- Affected range not yet confirmed against NVIDIA's bulletin 5889
Fixed in
- Secondary sources report AIStore 5.0 as the fixed release; this is not verified against NVIDIA's advisory
- Exact fixed build for this CVE: Unknown.
Workaround
- No vendor-published workaround known.
- General measure until patched: restrict network access to AIStore endpoints to trusted hosts only.
Exploitation
- No evidence of exploitation in the wild; CISA SSVC exploitation: none.
- Automatable: no (CISA SSVC).
- No public proof-of-concept found.
Our recommendation
- If you run AIStore, check whether you use version 4.9 or earlier and plan an upgrade to the fixed release once NVIDIA's bulletin 5889 confirms it.
- Upgrade all AIStore components together, as the same bulletin covers further critical CVEs.
- Restrict network exposure of AIStore endpoints and monitor logs for unexpected token-revocation requests.
- If you do not use AIStore, no action needed.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- NVIDIA Security Bulletin 5889 (GitHub) github.com
- NVD: CVE-2026-65173 nvd.nist.gov
- CVE Record: CVE-2026-65173 www.cve.org
- VulDB: CVE-2026-65173 vuldb.com
- Strix: CVE-2026-65173 www.strix.ai
- HOL Guard: CVE-2026-65173 hol.org
- Qovery: AIStore CVE exposure check and remediation www.qovery.com
- SecurityOnline: NVIDIA AIStore vulnerabilities securityonline.info
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 06:48.
Original description (NVD)
NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.