NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cr…
Summary
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or attacker-in-the-middle attacks. A successful exploit of this vulnerability might lead to code execution, data tampering, escalation of privileges, information disclosure, and denial of service.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Lint boundary warnings (1)
The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://nvidia.custhelp.com/app/answers/detail/a_id/5835
Sources
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2026-24218 US Government Resource
- https://nvidia.custhelp.com/app/answers/detail/a_id/5835 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-24218 Third Party Advisory
Timeline
- nvd_ingest NVD