What is GHSA-qxjv-8v85-xw7m?

GHSA-qxjv-8v85-xw7m is a security advisory published by GitHub Security Advisories with High severity. NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL...

Which CVE IDs does GHSA-qxjv-8v85-xw7m cover?

GHSA-qxjv-8v85-xw7m covers the following CVE IDs: CVE-2026-65172. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qxjv-8v85-xw7m?

GHSA-qxjv-8v85-xw7m has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-qxjv-8v85-xw7mHighCVSS 8.6

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-65172 →

📋 Description

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy.

A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-65172
https://github.com/NVIDIA/product-security/tree/main/2026/5889
https://www.cve.org/CVERecord?id=CVE-2026-65172
https://github.com/advisories/GHSA-qxjv-8v85-xw7m