CVE-2026-24178 - Vulnerability Analysis

Overview

NVIDIA NVFlare Dashboard contains an authorization bypass caused by user-controlled key in the user management and authentication system, letting unauthenticated attackers escalate privileges, tamper data, disclose information, execute code, and cause denial of service, exploit requires no authentication.

Severity & Score

Impact

Unauthenticated attackers can bypass authorization to escalate privileges, modify data, disclose information, execute code, and cause denial of service.

Mitigation

Update to the latest version with the vulnerability fixed.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-24178
• https://nvidia.custhelp.com/app/answers/detail/a_id/5819
• https://www.cve.org/CVERecord?id=CVE-2026-24178

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner