NVIDIA License System - Delegated Licensing Service (DLS): An unauthorised action against the DLS reaches high

Impact

An unauthorised action against the DLS reaches high integrity and availability impact with a changed scope - scored 8.7, the most serious of the licensing-appliance issues. An attacker on the management network can take the licensing service down or corrupt it, which eventually strands every vGPU guest.

Who can reach it

Adjacent network, low privileges, no user interaction. Any account on the management network reaches it.

What to do

Update the DLS appliance per bulletin 5705 as a priority, and segment the licensing appliance off the general management VLAN. Cost: appliance restart; plan it against your licence lease window so guests do not notice.

References

Related entries

• NVIDIA License System - Delegated Licensing Service (DLS): An unauthorised action against the DLS reaches partialCVE-2024-0122 · NVIDIA License System - Delegated Licensing Service (DLS)High
• NVIDIA License System - Delegated Licensing Service (DLS): SQL injection in the DLS appliance reaching a high integrityCVE-2025-23292 · NVIDIA License System - Delegated Licensing Service (DLS)Medium
• NVIDIA License System - Delegated Licensing Service (DLS): Improper authentication in the DLS lets an unauthenticatedCVE-2026-24241 · NVIDIA License System - Delegated Licensing Service (DLS)Medium
• NVIDIA License System - Delegated Licensing Service (DLS): An authorised-looking action leads to information disclosureCVE-2025-23291 · NVIDIA License System - Delegated Licensing Service (DLS)Low
• NemoClaw: Sensitive info exposure in logsCVE-2026-24222 · NemoClawHigh
• NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): A specially crafted shaderCVE-2022-28181 · NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko)High