NVIDIA Infrastructure Controller for Linux has an authentication flaw that allows an attacker to bypass normal authentication controls. The vulnerability is classified as improper authentication (CWE-287). If exploited, an attacker could elevate privileges, gain unauthorized access to system information, and tamper with data stored or processed by the controller.

Vendors and products affected are NVIDIA Infrastructure Controller running on Linux. Specific product version details are not provided in the available data.

The vulnerability received a CVSS score of 8.2, indicating considerable severity. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. Because the attack vector is not explicitly stated, it could be either local or remote, but the justification for privilege escalation suggests that an authenticated or networked attacker may need to send crafted authentication requests. The lack of exploitation statistics and KEV status means the risk remains high until mitigated.