Executive brief
NVIDIA Infrastructure Controller for Linux, a system management tool for data center servers, contains an improper authentication vulnerability that could allow an attacker to bypass authentication controls. Successful exploitation may lead to unauthorized access, privilege escalation, and data manipulation on affected systems.
Technical details
An improper authentication issue in NVIDIA Infrastructure Controller for Linux allows an attacker to bypass authentication mechanisms, leading to privilege escalation, information disclosure, and data tampering. The vulnerability likely requires local or adjacent network access. A patch is expected from NVIDIA.
Affected products
- NVIDIA Infrastructure Controller for Linux
Timeline
- 2026-09-22: disclosed