NVIDIA AIStore: Promote API reads any file reachable by the target process

Impact

The Promote API, which ingests files from a target's local filesystem into a bucket, accepts a crafted absolute source path and will read any file the target process can open. An unauthenticated caller can pull AIStore's configuration, credentials on disk, service-account tokens mounted into the pod, or other tenants' data under the storage mountpoints, and read it back out of the bucket. On a multi-tenant GPU cluster that is cross-tenant information disclosure from the storage tier, and any cloud or object-store credentials recovered this way extend the reach well past AIStore. Confidentiality only - no write primitive.

Who can reach it

Network-reachable, unauthenticated, no user interaction: any client that can call the AIStore Promote API.

What to do

Update AIStore per NVIDIA advisory 2026/5889 and restart the AIStore daemons - no fixed version is given in the record. In the meantime restrict access to the AIStore API to trusted networks, and assume credentials readable by the target process may already be exposed if the endpoint has been tenant-reachable.

References

Related entries

• Airflow Backfill API: any Dag editor can read and cancel backfills belonging to other DagsCVE-2026-68968 · Apache Airflow Backfill API (authorization dependency id parsing)High
• GitLab CE/EE: improper input validation lets an unauthenticated user cause a denial of serviceCVE-2026-7427 · GitLab CE/EE (unauthenticated request path, improper input validation)High
• Splunk Enterprise Edge Processor sidecar: Prometheus metrics endpoint served without authenticationCVE-2026-76262 · Splunk Enterprise Edge Processor SPL2 Preview sidecar (Prometheus metrics endpoint)High
• Dell OpenManage Server Administrator (network-facing management service): OMSA is the in-band hardware management agentCVE-2026-81438 · Dell OpenManage Server Administrator (network-facing management service)High
• Linux kernel nfsd: uncapped POSIX ACL entry count drives an O(n^2) sort in the NFS serverCVE-2026-89695 · Linux kernel nfsd (NFSv4 POSIX ACL decoder, sort_pacl_range)High
• Linux kernel nfsd: crafted inter-server COPY compound reaches ops with a NULL filehandle and panics nfsdCVE-2026-89696 · Linux kernel nfsd (inter-server COPY, NFSD4_FH_FOREIGN compound dispatch)High