Database/Control plane, storage & DevOps
NVIDIA AIStore: ETL management API missing authorization on job read and start/stop
Impact
The ETL management API on the AIStore proxy does not check authorization, so crafted GET or POST requests disclose ETL job information and start or stop existing ETL jobs. On a shared GPU cluster that means one tenant can enumerate another tenant's data-processing pipelines and halt them, stalling the dataset preparation that GPU jobs are waiting on, or restart them to burn capacity. This is the authorization gap in the ETL control surface, distinct from the ETL PodSpec injection in CVE-2026-65162 - here the attacker drives existing jobs rather than defining a new pod.
Who can reach it
Network-reachable, unauthenticated, no user interaction: any client that can send HTTP requests to an AIStore proxy.
What to do
Update AIStore per NVIDIA advisory 2026/5889 and restart the AIStore proxy daemons. The record names no fixed version. Until patched, put the proxy behind a network boundary that only trusted control-plane clients can cross, and disable ETL if the deployment does not use it.
References
Related entries
- rclone (serve restic): Path validation in serve restic is incomplete, so an authenticated caller escapes the configuredCVE-2026-71309 · rclone (serve restic)High
- LibreNMS: device hostname is concatenated into shell commands in libvirt discovery, giving RCECVE-2026-84194 · LibreNMS libvirt VM discovery (VminfoLibvirt.php)High
- Dell Terraform Provider for OME: API client error handling exposes sensitive informationCVE-2026-91882 · Dell Terraform Provider for OpenManage Enterprise (API client error handling)High
- VMware Aria Automation (SQL injection): An authenticated user injects SQL and performs unauthorized read/writeCVE-2024-22280 · VMware Aria Automation (SQL injection)High
- Juniper Security Director Policy Enforcer: unauthenticated attacker can replace vSRX images pushed to VMware NSXCVE-2025-11198 · Juniper Security Director Policy Enforcer (vSRX image upload)High
- VMware Aria Operations for Logs (credential disclosure): A View Only Admin reads the credentials of other VMwareCVE-2025-22218 · VMware Aria Operations for Logs (credential disclosure)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.