NVIDIA Dynamo: SSRF in API communication

CVSS 7.5CVE-2026-47617NVIDIA / GPU stackcurated

Impact

SSRF in API communication

Who can reach it

Tenant-supplied URI

What to do

Bump Dynamo; add egress policy

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47617 https://github.com/NVIDIA/product-security/tree/main/2026/5842

Related entries

NVIDIA Dynamo: SSRF in external service communicationCVE-2026-47618 · NVIDIA DynamoHigh
NVIDIA Dynamo: Improper access control on privileged operationsCVE-2026-47619 · NVIDIA DynamoMedium
NVIDIA Dynamo: DoS / corruption via race in resource syncCVE-2026-47620 · NVIDIA DynamoMedium
NVIDIA Dynamo: TOCTOU raceCVE-2026-47621 · NVIDIA DynamoMedium
NVIDIA Dynamo: Error messages from Dynamo leak sensitive information to an unauthenticated network callerCVE-2026-47622 · NVIDIA DynamoMedium
NVIDIA Dynamo: Unauthenticated remote code executionCVE-2026-24254 · NVIDIA DynamoCritical

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.