---
id: CVE-2026-65172
title: >-
  NVIDIA AIStore for Linux and Kubernetes contains a missing authorization
  vulnerability in the ETL management API where an unauthenticated remote
  attacker may access ETL information or control existing ETL jobs by sending
  crafted GET or P…
summary: >-
  NVIDIA AIStore for Linux and Kubernetes contains a missing authorization
  vulnerability in the ETL management API where an unauthenticated remote
  attacker may access ETL information or control existing ETL jobs by sending
  crafted GET or P…
severity: high
cvss: 8.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L'
cwe:
  - CWE-862
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T16:18:53.587'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-65172'
references:
  - url: 'https://github.com/NVIDIA/product-security/tree/main/2026/5889'
    label: psirt@nvidia.com
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-65172'
    label: psirt@nvidia.com
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-65172'
    label: psirt@nvidia.com
tags:
  - nvd
ingestedAt: '2026-10-13T13:27:04.026Z'
---

## Overview

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy.

A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.