Database/Control plane, storage & DevOps
NVIDIA AIStore: token-revocation endpoint accepts unauthenticated revocation lists
Impact
The endpoint that accepts token-revocation lists does not authenticate the caller, so anyone who can reach it can submit a crafted list. An attacker can revoke the credentials the cluster's own jobs use, which stops training and inference pipelines from reading or writing their datasets until the state is repaired - a denial of service against the storage tier that every GPU node depends on, plus tampering with the authorization state itself. Impact is integrity and availability only; NVIDIA scores it 9.1 with no confidentiality loss.
Who can reach it
Network-reachable, unauthenticated, no user interaction. Any host or pod that can route to the AIStore authentication endpoint.
What to do
Update AIStore per NVIDIA advisory 2026/5889 and roll the AIStore proxy daemons. No fixed version is given in the record - take it from the advisory. Interim mitigation is network-level: restrict the AIStore control endpoints to the management network and deny tenant pods a route to them.
References
Related entries
- Apache Airflow FAB provider: Azure AD id_token issuer and audience unchecked, any tenant can log inCVE-2026-75156 · Apache Airflow FAB provider (Azure AD OAuth id_token issuer/audience validation)Critical
- Airflow Keycloak provider: Keycloak tokens from unsigned cookies are not bound to the session identityCVE-2026-76186 · Apache Airflow Keycloak provider (session identity vs. Keycloak access/refresh token binding)Critical
- Fortra BoKS Manager: command injection in crlserver gives root on the BoKS Master via a crafted CRL URLCVE-2026-79898 · Fortra BoKS Manager crlserver (CRL URL handling)Critical
- Airflow FAB provider: password change through the Admin PATCH endpoint does not evict existing sessionsCVE-2026-86462 · Apache Airflow FAB provider (Admin user-edit PATCH endpoint, session invalidation)Critical
- Apache Airflow: Core API logout does not revoke bearer tokens, so a stolen token outlives the sessionCVE-2026-86473 · Apache Airflow Core API (logout endpoint, bearer-token revocation)Critical
- Apache Airflow SSH/SFTP providers: host-key checking off by default, so workers trust any server keyCVE-2026-94134 · Apache Airflow SSH and SFTP provider hooks (host-key verification default)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.