# CVE-2026-47624: NVIDIA DGX Spark UEFI password bypass

Source: https://junglewise.ai/threats/cve-2026-47624-nvidia-dgx-spark-uefi-password-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-25. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-47624 · Severity: medium · CVSS 6 · Published 2026-08-25

NVIDIA DGX Spark is a data center server platform used for AI and machine learning workloads. The UEFI firmware contains a vulnerability that allows a privileged local user to bypass UEFI administrator password protection, potentially enabling unauthorized firmware modifications or system compromise.

Technologies: [Nvidia Dgx Spark](https://junglewise.ai/threats/technologies/dgx-spark), [Nvidia Dgx Spark Uefi](https://junglewise.ai/threats/technologies/dgx-spark-uefi). Vendors: [Nvidia](https://junglewise.ai/threats/vendors/nvidia).

## Quick answers

**Is CVE-2026-47624 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47624 being exploited in the wild.

**How severe is CVE-2026-47624?** Medium severity, with a CVSS score of 6, published 25 August 2026.

**Which products and versions are affected?** Nvidia Dgx Spark <UNKNOWN>.

**Is there a fix for CVE-2026-47624?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-47624 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-47624?** Check whether you run Nvidia Dgx Spark or Nvidia Dgx Spark Uefi at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a CWE-693 (Protection Mechanism Failure) affecting the UEFI firmware in NVIDIA DGX Spark. A privileged local user can exploit this flaw to circumvent administrator password protection in UEFI, gaining unauthorized access to firmware settings and potentially system-level capabilities. The attack requires local access and elevated privileges. No evidence of active exploitation in the wild has been reported. NVIDIA has published security bulletin 5867 with the technical details and patch information.

## Affected products

- NVIDIA DGX Spark <UNKNOWN>

## Timeline

- 2026-08-25: disclosed

## References

- [https://github.com/NVIDIA/product-security/tree/main/2026/5867](https://github.com/NVIDIA/product-security/tree/main/2026/5867)
- [https://www.cve.org/CVERecord?id=CVE-2026-47624](https://www.cve.org/CVERecord?id=CVE-2026-47624)

## Related threats

- [NVIDIA DGX Spark out-of-bounds write in system firmware](https://junglewise.ai/threats/cve-2026-47626-nvidia-dgx-spark-out-of-bounds-write-in-system-firmware)
- [NVIDIA DGX Spark NULL pointer dereference in firmware](https://junglewise.ai/threats/cve-2026-24263-nvidia-dgx-spark-null-pointer-dereference-in-firmware)
- [NVIDIA DGX Spark out-of-bounds write in system firmware](https://junglewise.ai/threats/cve-2026-24262-nvidia-dgx-spark-out-of-bounds-write-in-system-firmware)
- [NVIDIA DGX Spark out-of-bounds read in MM firmware](https://junglewise.ai/threats/cve-2026-24225-nvidia-dgx-spark-out-of-bounds-read-in-mm-firmware)