Database/Control plane, storage & DevOps
NVIDIA AIStore: dSort archive extraction honours traversal paths in member names
Impact
dSort extracts archive members without sanitising their names, so an archive with ../ in its member paths writes outside the intended directory - the classic zip-slip, here on the storage nodes of a GPU cluster. An attacker who can submit a dSort job over a crafted archive creates or overwrites files as the AIStore target user, which NVIDIA says can lead to code execution, privilege escalation, data tampering and denial of service. Any pipeline that lets users upload datasets that are later sorted turns a data path into a write primitive on the storage tier. Attack complexity is rated high (8.1). Separate from the rename-handler traversal in CVE-2026-65103.
Who can reach it
Network-reachable, no authentication stated: anyone who can submit a dSort job, or place an archive that a dSort job will extract.
What to do
Update AIStore per NVIDIA advisory 2026/5889 and restart the AIStore target daemons; the record names no fixed version. Interim: restrict who may submit dSort jobs, and treat tenant-supplied archives as untrusted input to the sort pipeline.
References
Related entries
- Dell PowerStore T SDNAS: unauthenticated NFS/RPC buffer overflow allows command execution on the arrayCVE-2026-70415 · Dell PowerStore T SDNAS (NFS/RPC service)High
- Jenkins: inconsistent case handling in user and group names allows impersonation of other accountsCVE-2026-70429 · Jenkins core (user and group name case-sensitivity handling)High
- Apache Airflow FAB provider: Authentik OAuth path does not check id_token issuer or audienceCVE-2026-86466 · Apache Airflow FAB provider (Authentik OAuth id_token validation)High
- Ansible community.general: memcached fact cache unpickles values, giving code execution on the controllerCVE-2026-87874 · Ansible community.general collection (memcached fact cache plugin)High
- GlusterFS (glusterd, auth.allow): The auth.allow option does not actually restrict who may connect, so anyCVE-2018-1112 · GlusterFS (glusterd, auth.allow)High
- Altair PBS Professional / OpenPBS (pbs_mom): Pbs_mom, the daemon that executes jobs on every compute node, acceptsCVE-2019-15719 · Altair PBS Professional / OpenPBS (pbs_mom)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.