nvflare vulnerabilities and fixes

Recent CVEs affecting nvflare, with upgrade or downgrade steps. 3 tracked.

nvflare has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-04-28. Highest priority: CVE-2026-24178 (score 51/100).

• CVE-2026-24178 CRITICAL 9.8 UPGRADE NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an un
• CVE-2026-24186 HIGH 8.8 UPGRADE NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted d
• CVE-2026-24204 MEDIUM 6.5 UPGRADE NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path tra

FAQ

How do I fix nvflare vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is nvflare being exploited right now?

None of the tracked nvflare CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which nvflare CVE should I patch first?

CVE-2026-24178 currently ranks highest (51/100): NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an un.

RSS feed for nvflare · ← Back to latest CVEs