CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/NVIDIA/product-security/tree/main/2026/5842	Product
https://nvd.nist.gov/vuln/detail/CVE-2026-47622	Third Party Advisory US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-47622	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA Dynamo para Linux contiene una vulnerabilidad donde un atacante podría causar la generación de mensajes de error que contienen información sensible. Un exploit exitoso de esta vulnerabilidad podría conducir a la revelación de información.

Information

Published : 2026-08-04 18:16

Updated : 2026-10-24 16:10

NVD link : CVE-2026-47622

Mitre link : CVE-2026-47622

CVE.ORG link : CVE-2026-47622

JSON object : View

Products Affected

linux

linux_kernel

nvidia

dynamo

CWE

CWE-209

Generation of Error Message Containing Sensitive Information

{"id": "CVE-2026-47622", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47622", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-04T18:18:43.870616Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "Dynamo", "versions": [{"status": "affected", "version": "0 to v1.2.0"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}]}], "published": "2026-08-04T18:16:51.860", "references": [{"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5842", "tags": ["Product"], "source": "psirt@nvidia.com"}, {"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47622", "tags": ["Third Party Advisory", "US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-47622", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure."}, {"lang": "es", "value": "NVIDIA Dynamo para Linux contiene una vulnerabilidad donde un atacante podr\u00eda causar la generaci\u00f3n de mensajes de error que contienen informaci\u00f3n sensible. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la revelaci\u00f3n de informaci\u00f3n."}], "lastModified": "2026-10-24T16:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5ED26DE-C0F1-46B3-A6B8-BCE6F4825D7F", "versionEndIncluding": "1.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@nvidia.com"}