NVIDIA Dynamo: SSRF via URL handling

CVSS 7.5CVE-2026-47613NVIDIA / GPU stackcurated

Impact

SSRF via URL handling

Who can reach it

Tenant-supplied URL

What to do

Bump Dynamo; add egress network policy

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47613 https://github.com/NVIDIA/product-security/tree/main/2026/5842

Related entries

NVIDIA Dynamo: SSRF in remote resource loadingCVE-2026-47614 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF in model fetchingCVE-2026-47615 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF in data retrievalCVE-2026-47616 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF in API communicationCVE-2026-47617 · NVIDIA DynamoHigh
NVIDIA Dynamo: SSRF in external service communicationCVE-2026-47618 · NVIDIA DynamoHigh
NVIDIA Dynamo: Improper access control on privileged operationsCVE-2026-47619 · NVIDIA DynamoMedium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.