CVE-2026-24254 in Dynamo

Summary

by MITRE • 08/04/2026

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Nvidia
• Reservation: 01/21/2026
• Disclosure: 08/04/2026
• Moderation: accepted
• Entry: VDB-385898
• CPE: ready
• CWE: CWE-787 (confirmed)
• CVSS: 9.9 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-24254
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-24254
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-24254/