NVIDIA Infrastructure Controller for Linux contains a flaw where debug information is not cleared, allowing an attacker to retrieve sensitive system data. The vulnerability can expose confidential configuration and system details, potentially aiding further attacks. This weakness stems from improper management of debug metadata and falls under CWE‑1258.

The affected product is NVIDIA Infrastructure Controller running on Linux. No specific version numbers are supplied, so all installations of this controller may be impacted until a patch is applied.

The CVSS score of 4.1 indicates moderate risk; the EPSS score is not available, so the likelihood of exploitation is unknown. This vulnerability is not listed in the CISA KEV catalog. The likely attack vector is an attacker who can access the controller process or debug interface, such as a local privileged user or someone who exploits a separate weakness to gain such access. Successful exploitation would result in information disclosure.