NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.5 · nvidiaNVD modified 2026-10-23 21:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:dynamo:*:*:*:*:*:*:*:*
References 3
- https://github.com/NVIDIA/product-security/tree/main/2026/5842 Product
- https://nvd.nist.gov/vuln/detail/CVE-2026-24255 Third Party Advisory, US Government Resource
- https://www.cve.org/CVERecord?id=CVE-2026-24255 Third Party Advisory