NVIDIA Infrastructure Controller for Linux contains a flaw that permits an attacker to interfere with the enforcement of a behavioral workflow. When successfully exploited, this flaw can lead to alteration of data, interruption of service availability, and leakage of sensitive information. The primary weakness is an improper handling of workflow control which is reflected in CWE-841.

The vulnerability affects NVIDIA Infrastructure Controller on Linux platforms. Specific affected versions are not disclosed in the provided information, so all releases may be susceptible until a vendor update is released.

The CVSS score of 5 indicates a moderate risk. No exploitation probability score (EPSS) is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited or no evidence of active exploitation in the wild. The attack vector is not specified, so it is inferred that the vulnerability could potentially be triggered through remote or local interfaces that interact with the controller’s workflow mechanisms. As such, the overall threat remains moderate pending further insight into the attack surface.