CVE-2026-47622

Error Message Information Disclosure in NVIDIA Dynamo for Linux

Published Aug 4, 2026 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Description

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.

Analysis

Technical impact

NVIDIA Dynamo for Linux contains a flaw that allows an attacker to trigger the generation of error messages containing sensitive information. The vulnerability is a classic Information Disclosure flaw (CWE‑209). A successful exploitation could reveal internal data or configuration details that are not intended for public view.

Affected Systems

This flaw affects NVIDIA Dynamo running on Linux platforms. No specific version numbers are listed in the advisory.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the description does not specify how the error messages can be generated, it is inferred that the attack vector is likely local or requires elevated privileges, and no remote code execution is possible.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

NVIDIA

Dynamo

unaffected

Version	Status	Constraints
`0 to v1.2.0`	affected	—

Configuration 1 [-]

AND

cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Nvidia

Dynamo

Version	Status	Scheme	Platform
`0 to v1.2.0`	affected	generic	['Linux']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update NVIDIA Dynamo to the latest patch version that eliminates the error message disclosure.
Configure Dynamo to suppress verbose error output or remove sensitive data from logs.
Restrict access to Dynamo services and monitor logs for abnormal error generation.

Generated by OpenCVE AI on August 4, 2026 at 19:18 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.459% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://github.com/NVIDIA/product-security/tree/main/2026/5842
https://nvd.nist.gov/vuln/detail/CVE-2026-47622
https://www.cve.org/CVERecord?id=CVE-2026-47622

History

Aug 5, 2026 10:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Nvidia Nvidia dynamo
Vendors & Products		Nvidia Nvidia dynamo

Aug 4, 2026 7:45 PM Title updated View changes

Type	Values Removed	Values Added
Title		Error Message Information Disclosure in NVIDIA Dynamo for Linux

Aug 4, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 4, 2026 5:45 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.
Weaknesses		CWE-209
References		https://github.com/NVIDIA/product-security/tree/main/2026/5842 https://nvd.nist.gov/vuln/detail/CVE-2026-47622 https://www.cve.org/CVERecord?id=CVE-2026-47622
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}`