Description
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
Published: 2026-08-04
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

NVIDIA Dynamo for Linux contains a flaw that allows an attacker to trigger the generation of error messages containing sensitive information. The vulnerability is a classic Information Disclosure flaw (CWE‑209). A successful exploitation could reveal internal data or configuration details that are not intended for public view.

Affected Systems

This flaw affects NVIDIA Dynamo running on Linux platforms. No specific version numbers are listed in the advisory.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the description does not specify how the error messages can be generated, it is inferred that the attack vector is likely local or requires elevated privileges, and no remote code execution is possible.

Generated by OpenCVE AI on August 4, 2026 at 19:18 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update NVIDIA Dynamo to the latest patch version that eliminates the error message disclosure.
  • Configure Dynamo to suppress verbose error output or remove sensitive data from logs.
  • Restrict access to Dynamo services and monitor logs for abnormal error generation.

Generated by OpenCVE AI on August 4, 2026 at 19:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia dynamo
Vendors & Products Nvidia
Nvidia dynamo

Tue, 04 Aug 2026 19:45:00 +0000

Type Values Removed Values Added
Title Error Message Information Disclosure in NVIDIA Dynamo for Linux

Tue, 04 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 04 Aug 2026 17:45:00 +0000

Type Values Removed Values Added
Description NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
Weaknesses CWE-209
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

Linux Linux Kernel
Nvidia Dynamo
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-08-04T18:19:12.527Z

Reserved: 2026-05-19T19:55:52.529Z

Link: CVE-2026-47622

cve-icon Vulnrichment

Updated: 2026-08-04T18:19:08.448Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-04T18:16:51.860

Modified: 2026-08-07T17:03:49.613

Link: CVE-2026-47622

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T10:19:17Z

Weaknesses
  • CWE-209

    Generation of Error Message Containing Sensitive Information