Technical impact
NVIDIA Dynamo for Linux includes a flaw that permits deserialization of untrusted data, a weakness identified as CWE‑502. When an attacker supplies crafted input, the system may incorrectly interpret it, leading to unexpected behavior. The documented effects are denial of service and tampering of data stored or processed by the Dynamo application.
Affected Systems
The vulnerability affects NVIDIA Dynamo for Linux. The specific affected versions are not enumerated in the available information.
Risk and Exploitability
The CVSS score of 8.2 classifies this as a high‑severity vulnerability, indicating significant potential impact on integrity and availability. No EPSS score is available, so the current likelihood of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed exploit in the wild at this time. The attack vector is likely to involve an attacker delivering malicious data to Dynamo’s input interfaces; this inference is drawn from the description that mentions deserialization of untrusted data, but the precise method of delivery is not specified in the source.
