VULNERABILITY INTELLIGENCE

CVE-2026-24255

CVSS score7.5 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2026-08-04
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.

Weakness classification

  • CWE-1023: Incomplete Comparison with Missing Factors

Primary references