PatchTheCVECVE-2026-24255: NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could ca
CVE-2026-24255 is a high-severity flaw (CVSS 7.5) affecting dynamo. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vulnerability might lead to data tampering.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 55%) |
| CISA exploited list | No |
| Weakness | CWE-1023 |
| Published | 2026-08-04 |
| Last modified | 2026-10-23 |
Last updated 2026-10-23 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-24255?
dynamo: upgrade to newer than 1.1.0. Exact commands for each OS are on this page.
Is CVE-2026-24255 being exploited?
CVE-2026-24255 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-24255 affect?
CVE-2026-24255 affects dynamo. Severity is high (CVSS 7.5). NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful
How urgent is CVE-2026-24255?
Priority 48/100. High severity; Remotely exploitable, no login, no user action; On your watchlist
Software pages
Related CVEs
- CVE-2026-24254 CRITICAL 9.8 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could c
- CVE-2026-47623 HIGH 8.2 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted da
- CVE-2026-24253 HIGH 8.2 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write
- CVE-2026-47612 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause im
- CVE-2026-47613 HIGH 7.5 UPGRADE NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname