Database/Control plane, storage & DevOps
NVIDIA AIStore: dSort fetches an attacker-supplied external key map URL (SSRF)
Impact
A distributed sort job takes a URL for its external key map, and AIStore fetches it without constraining the destination. An attacker who can submit a dSort job makes the AIStore target fetch arbitrary URLs from inside the cluster and can read back the response, which on a cloud GPU node reaches the instance metadata service and any internal HTTP endpoint the storage tier can see but the attacker cannot - management APIs, the Kubernetes API, other tenants' services. NVIDIA scores it 8.6 with a scope change, reflecting that the disclosed data belongs to systems other than AIStore. Distinct from the HT-backend SSRF in CVE-2026-65170: different subsystem and different entry point.
Who can reach it
Network-reachable, no authentication or user interaction stated in the record: any client that can submit a dSort job to AIStore.
What to do
Update AIStore per NVIDIA advisory 2026/5889 and restart the AIStore target and proxy daemons. No fixed version is in the record. Mitigations that help in the meantime: block node access to the cloud metadata endpoint (or require IMDSv2-style tokens), restrict egress from AIStore pods with a NetworkPolicy, and limit who may submit dSort jobs.
References
Related entries
- NVIDIA AIStore: experimental HT backend fetches a crafted original URL (SSRF)CVE-2026-65170 · NVIDIA AIStore (experimental HT backend, original URL handling)High
- NVIDIA AIStore: ETL management API missing authorization on job read and start/stopCVE-2026-65172 · NVIDIA AIStore (ETL management API, proxy GET/POST)High
- rclone (serve restic): Path validation in serve restic is incomplete, so an authenticated caller escapes the configuredCVE-2026-71309 · rclone (serve restic)High
- LibreNMS: device hostname is concatenated into shell commands in libvirt discovery, giving RCECVE-2026-84194 · LibreNMS libvirt VM discovery (VminfoLibvirt.php)High
- Dell Terraform Provider for OME: API client error handling exposes sensitive informationCVE-2026-91882 · Dell Terraform Provider for OpenManage Enterprise (API client error handling)High
- VMware Aria Automation (SQL injection): An authenticated user injects SQL and performs unauthorized read/writeCVE-2024-22280 · VMware Aria Automation (SQL injection)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.