NVIDIA Infrastructure Controller for Linux contains a flaw that causes the system to skip proper certificate validation. If an attacker exploits this, they could read sensitive data, alter communications, or disrupt the controller’s operation.

The affected vendor is NVIDIA and the product is the NVIDIA Infrastructure Controller for Linux. No specific version details are provided, so any installed instance could be affected until confirmed otherwise.

The CVSS score of 7.5 indicates a high severity vulnerability. The EPSS score is not available, so the likelihood of exploitation is uncertain. This weakness is not listed in CISA KEV. The threat is likely remote, as improper certificate validation is commonly abused by attackers who can supply rogue certificates to an otherwise trusted service, enabling interception, tampering or denial of service.