The Open GPU Vulnerability Database
An open project to list all known vulnerabilities in the stack GPU datacenters run on.
6,508 entries901 critical173 known exploited
criticalhighmediumlowSelect a layer to filter
Showing 60 of 6,508 entries · 901 critical · 173 known exploited
vLLM: request-controlled processor code_revision loads arbitrary remote model code, giving RCEcriticalCVE-2026-114053AI/ML frameworks & servingOct 21, 2026Oct 21, 2026vLLM (MOSS-Audio multimodal processor cache, /tokenize endpoint): vLLM caches a processor object for every distincthighCVE-2026-114052AI/ML frameworks & servingOct 21, 2026Oct 21, 2026vLLM: client-supplied multimodal processor parameters exhaust memory and kill the shared serverhighCVE-2026-114055AI/ML frameworks & servingOct 21, 2026Oct 21, 2026StreamsHub Console operator: tenant-supplied container image runs with a cluster-wide Strimzi ServiceAccountcriticalCVE-2026-105312Container, Kubernetes & orchestrationOct 20, 2026Oct 20, 2026Argo CD repo-server: Jsonnet imports escape the repository root and read service-account tokenscriticalCVE-2026-113672Container, Kubernetes & orchestrationOct 20, 2026Oct 20, 2026Argo CD repo-server: Kustomize ref value injects git --upload-pack and runs commands in the podcriticalCVE-2026-113708Container, Kubernetes & orchestrationOct 20, 2026Oct 20, 2026Argo CD repo-server: repository-controlled Helm configHome auto-loads a downloader plugin and executes itcriticalCVE-2026-113709Container, Kubernetes & orchestrationOct 20, 2026Oct 20, 2026Langchain-Chatchat: unauthenticated /tools/call invokes the shell tool for remote command executioncriticalCVE-2026-75128AI/ML frameworks & servingOct 20, 2026Oct 20, 2026DB-GPT: shipped docker-compose sets a static MySQL root password and publishes 3306 on all interfacescriticalCVE-2026-77933AI/ML frameworks & servingOct 20, 2026Oct 20, 2026Oracle ZFS Storage Appliance Kit: low-privileged HTTP request takes over the storage controllerhighCVE-2026-91527Control plane, storage & DevOpsOct 20, 2026Oct 20, 2026Coze Studio: any registered user gets code execution from a workflow code node by defaulthighCVE-2026-77934AI/ML frameworks & servingOct 20, 2026Oct 20, 2026Mercury: blocklist typo exposes Jupyter terminal API to unauthenticated shell accesscriticalCVE-2026-111057AI/ML frameworks & servingOct 19, 2026Oct 19, 2026Mercury: tokenless deployments let anonymous clients start kernels and execute arbitrary PythoncriticalCVE-2026-111058AI/ML frameworks & servingOct 19, 2026Oct 19, 2026MLflow: path traversal in FileStore trace IDs lets unauthenticated writes outside the tracking directoryhighCVE-2026-53995AI/ML frameworks & servingOct 19, 2026Oct 19, 2026Semaphore UI: task_runner users override Ansible connection vars to run code as the server userhighCVE-2026-112305Control plane, storage & DevOpsOct 19, 2026Oct 19, 2026BentoML: newline in docker.env keys injects Dockerfile instructions during bentoml containerizehighCVE-2026-112264AI/ML frameworks & servingOct 19, 2026Oct 19, 2026
SGLang: a one-character request id lets any client abort every other client's in-flight generationhighCVE-2026-112266AI/ML frameworks & servingOct 19, 2026Oct 19, 2026Dockhand: unauthenticated WebSocket exec gives shell access inside any container whose ID is knowncriticalCVE-2026-57169Container, Kubernetes & orchestrationOct 16, 2026Oct 16, 2026SGLang: unauthenticated debug dumper endpoint executes Python in the scheduler processcriticalCVE-2026-111391AI/ML frameworks & servingOct 16, 2026Oct 16, 2026Arcane: delegated users:update permission lets any operator reset the global administrator passwordhighCVE-2026-96627Container, Kubernetes & orchestrationOct 16, 2026Oct 16, 2026Arcane: repointing a registry URL leaks the stored registry credential to an attacker-controlled hosthighCVE-2026-96626Container, Kubernetes & orchestrationOct 16, 2026Oct 16, 2026BMC Helix Network Management: SAML login path accepts any password for the local administratorcriticalCVE-2026-111283Firmware, BMC & network fabricOct 15, 2026Oct 15, 2026BeyondTrust Remote Support appliance (internal message handling): Internal components of the Remote Support appliancecriticalCVE-2026-102764Control plane, storage & DevOpsKnown exploitedOct 15, 2026Oct 15, 2026runwasi wasmtime shim: crafted OCI layer is deserialized as native code, escaping the WASI sandboxcriticalCVE-2026-47218Container, Kubernetes & orchestrationOct 15, 2026Oct 15, 2026Nutanix Prism Element: internal management header grants unauthenticated cluster-admin JWTcriticalCVE-2026-84731Kernel, userspace & hypervisorOct 15, 2026Oct 15, 2026Apache Airflow SSH/SFTP providers: host-key checking off by default, so workers trust any server keycriticalCVE-2026-94134Control plane, storage & DevOpsOct 15, 2026Oct 15, 2026Ansible Operator Plugins: Jinja2 template injection in CR spec values gives cluster-wide code executionhighCVE-2026-92982Container, Kubernetes & orchestrationOct 15, 2026Oct 15, 2026KEDA: namespace admin can exfiltrate the operator ServiceAccount token to a tenant-controlled Vault addresscriticalCVE-2026-77524Container, Kubernetes & orchestrationOct 14, 2026Oct 14, 2026Junos OS on SRX: heap overflow in the SVR path lets unauthenticated IPv4 packets crash or compromise the firewallcriticalCVE-2026-101950Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos J-Web: unauthenticated attacker gains root-level configuration access to the devicecriticalCVE-2026-101954Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS J-Web: unauthenticated attacker runs arbitrary Junos commands as rootcriticalCVE-2026-101956Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS Evolved bootzd: crafted DHCP response gives root command execution on the switchcriticalCVE-2026-101967Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS: integer underflow in Extended Echo handling crashes the kernel from the networkcriticalCVE-2026-101980Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: EVPN-VPWS route advertisements overflow a stack buffer, root execution on Junos OScriticalCVE-2026-101982Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos httpd: stack overflow gives unauthenticated remote code execution when a J-Web virtual-domain is configuredcriticalCVE-2026-101983Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos J-Web: crafted HTTP request bypasses authentication and runs CGI content with elevated privilegescriticalCVE-2026-101986Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: flow-spec update selected for re-advertisement overflows a stack buffer, up to routing-engine compromisecriticalCVE-2026-101990+1Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS Evolved: low-privileged TACACS+ user escalates to root via authorization refreshcriticalCVE-2026-102031Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos sdxd: heap overflow on the SDX/SRC connection yields root code execution on the devicecriticalCVE-2026-102175Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on MX: stack overflow in kmd gives unauthenticated root via IKE certificate packetscriticalCVE-2026-102182Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: stack overflow in srxpfe gives unauthenticated root code execution via a crafted GRE packetcriticalCVE-2026-33792Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: stack overflow in UTM Anti-Spam SBL lets a malformed DNS reply run code as rootcriticalCVE-2026-101955Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: SQL injection in ipfd lets a Security Intelligence feed execute code as rootcriticalCVE-2026-101997Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: XML injection in utmd lets a malicious URL-feed server commit device configuration as rootcriticalCVE-2026-102037Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: format string flaw in ipfd gives root code execution from an impersonated HTTPS feed servercriticalCVE-2026-102062Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS Evolved kernel: crafted TCP packet panics the switch when BGP/LDP key-chain auth is usedcriticalCVE-2026-102068Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS: reachable assertion in the TWAMP client lets one TCP packet kill rmopdcriticalCVE-2026-102070Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: malformed ADVPN peer attributes overflow the VPN daemon and take over the devicecriticalCVE-2026-102084Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: BGP updates processed by BMP route monitoring overflow a stack buffer, up to root executioncriticalCVE-2026-33789+1Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Dokku: stored docker-options values reach bash eval, giving command execution as the dokku usercriticalCVE-2026-86002Container, Kubernetes & orchestrationOct 14, 2026Oct 14, 2026Dell Terraform Provider for Redfish: TLS verification disabled, exposing BMC credentials to MITMcriticalCVE-2026-91881Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026
NetBird client: unescaped peer hostname injects OpenSSH config directives and runs commands on other peershighCVE-2026-105429Control plane, storage & DevOpsOct 14, 2026Oct 14, 2026Junos OS Evolved jti-dialoutd: crafted sensor resource causes persistent telemetry dial-out outagehighCVE-2026-101966Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026insights-runtime-extractor: incomplete privilege drop lets any pod get host root via its own argv[0]highCVE-2026-104795Container, Kubernetes & orchestrationOct 14, 2026Oct 14, 2026Gitea Runner: workflow-controlled container options bypass forced non-privileged mode and give root on the runner hosthighCVE-2026-73802Control plane, storage & DevOpsOct 14, 2026Oct 14, 2026Junos rpd: BGP UPDATE crashes the routing daemon when a policy points at a nonexistent routing tablehighCVE-2026-101939Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: BGP UPDATE crashes the routing daemon when ISO-VPN and egress protection are configuredhighCVE-2026-101940Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: BGP route update crashes the routing daemon with resolution-map and policy event-tracing configuredhighCVE-2026-101941Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: malformed EVPN routes with inconsistent length fields crash the routing daemon on re-advertisementhighCVE-2026-101942+1Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: crafted BGP EVPN update message crashes the routing daemonhighCVE-2026-101943Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026
SGLang: a one-character request id lets any client abort every other client's in-flight generationhighCVE-2026-112266AI/ML frameworks & servingOct 19, 2026Oct 19, 2026Dockhand: unauthenticated WebSocket exec gives shell access inside any container whose ID is knowncriticalCVE-2026-57169Container, Kubernetes & orchestrationOct 16, 2026Oct 16, 2026SGLang: unauthenticated debug dumper endpoint executes Python in the scheduler processcriticalCVE-2026-111391AI/ML frameworks & servingOct 16, 2026Oct 16, 2026Arcane: delegated users:update permission lets any operator reset the global administrator passwordhighCVE-2026-96627Container, Kubernetes & orchestrationOct 16, 2026Oct 16, 2026Arcane: repointing a registry URL leaks the stored registry credential to an attacker-controlled hosthighCVE-2026-96626Container, Kubernetes & orchestrationOct 16, 2026Oct 16, 2026BMC Helix Network Management: SAML login path accepts any password for the local administratorcriticalCVE-2026-111283Firmware, BMC & network fabricOct 15, 2026Oct 15, 2026BeyondTrust Remote Support appliance (internal message handling): Internal components of the Remote Support appliancecriticalCVE-2026-102764Control plane, storage & DevOpsKnown exploitedOct 15, 2026Oct 15, 2026runwasi wasmtime shim: crafted OCI layer is deserialized as native code, escaping the WASI sandboxcriticalCVE-2026-47218Container, Kubernetes & orchestrationOct 15, 2026Oct 15, 2026Nutanix Prism Element: internal management header grants unauthenticated cluster-admin JWTcriticalCVE-2026-84731Kernel, userspace & hypervisorOct 15, 2026Oct 15, 2026Apache Airflow SSH/SFTP providers: host-key checking off by default, so workers trust any server keycriticalCVE-2026-94134Control plane, storage & DevOpsOct 15, 2026Oct 15, 2026Ansible Operator Plugins: Jinja2 template injection in CR spec values gives cluster-wide code executionhighCVE-2026-92982Container, Kubernetes & orchestrationOct 15, 2026Oct 15, 2026KEDA: namespace admin can exfiltrate the operator ServiceAccount token to a tenant-controlled Vault addresscriticalCVE-2026-77524Container, Kubernetes & orchestrationOct 14, 2026Oct 14, 2026Junos OS on SRX: heap overflow in the SVR path lets unauthenticated IPv4 packets crash or compromise the firewallcriticalCVE-2026-101950Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos J-Web: unauthenticated attacker gains root-level configuration access to the devicecriticalCVE-2026-101954Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS J-Web: unauthenticated attacker runs arbitrary Junos commands as rootcriticalCVE-2026-101956Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS Evolved bootzd: crafted DHCP response gives root command execution on the switchcriticalCVE-2026-101967Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS: integer underflow in Extended Echo handling crashes the kernel from the networkcriticalCVE-2026-101980Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: EVPN-VPWS route advertisements overflow a stack buffer, root execution on Junos OScriticalCVE-2026-101982Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos httpd: stack overflow gives unauthenticated remote code execution when a J-Web virtual-domain is configuredcriticalCVE-2026-101983Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos J-Web: crafted HTTP request bypasses authentication and runs CGI content with elevated privilegescriticalCVE-2026-101986Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: flow-spec update selected for re-advertisement overflows a stack buffer, up to routing-engine compromisecriticalCVE-2026-101990+1Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS Evolved: low-privileged TACACS+ user escalates to root via authorization refreshcriticalCVE-2026-102031Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos sdxd: heap overflow on the SDX/SRC connection yields root code execution on the devicecriticalCVE-2026-102175Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on MX: stack overflow in kmd gives unauthenticated root via IKE certificate packetscriticalCVE-2026-102182Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: stack overflow in srxpfe gives unauthenticated root code execution via a crafted GRE packetcriticalCVE-2026-33792Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: stack overflow in UTM Anti-Spam SBL lets a malformed DNS reply run code as rootcriticalCVE-2026-101955Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: SQL injection in ipfd lets a Security Intelligence feed execute code as rootcriticalCVE-2026-101997Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: XML injection in utmd lets a malicious URL-feed server commit device configuration as rootcriticalCVE-2026-102037Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: format string flaw in ipfd gives root code execution from an impersonated HTTPS feed servercriticalCVE-2026-102062Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS Evolved kernel: crafted TCP packet panics the switch when BGP/LDP key-chain auth is usedcriticalCVE-2026-102068Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS: reachable assertion in the TWAMP client lets one TCP packet kill rmopdcriticalCVE-2026-102070Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos OS on SRX: malformed ADVPN peer attributes overflow the VPN daemon and take over the devicecriticalCVE-2026-102084Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: BGP updates processed by BMP route monitoring overflow a stack buffer, up to root executioncriticalCVE-2026-33789+1Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Dokku: stored docker-options values reach bash eval, giving command execution as the dokku usercriticalCVE-2026-86002Container, Kubernetes & orchestrationOct 14, 2026Oct 14, 2026Dell Terraform Provider for Redfish: TLS verification disabled, exposing BMC credentials to MITMcriticalCVE-2026-91881Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026NetBird client: unescaped peer hostname injects OpenSSH config directives and runs commands on other peershighCVE-2026-105429Control plane, storage & DevOpsOct 14, 2026Oct 14, 2026Junos OS Evolved jti-dialoutd: crafted sensor resource causes persistent telemetry dial-out outagehighCVE-2026-101966Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026insights-runtime-extractor: incomplete privilege drop lets any pod get host root via its own argv[0]highCVE-2026-104795Container, Kubernetes & orchestrationOct 14, 2026Oct 14, 2026Gitea Runner: workflow-controlled container options bypass forced non-privileged mode and give root on the runner hosthighCVE-2026-73802Control plane, storage & DevOpsOct 14, 2026Oct 14, 2026Junos rpd: BGP UPDATE crashes the routing daemon when a policy points at a nonexistent routing tablehighCVE-2026-101939Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: BGP UPDATE crashes the routing daemon when ISO-VPN and egress protection are configuredhighCVE-2026-101940Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: BGP route update crashes the routing daemon with resolution-map and policy event-tracing configuredhighCVE-2026-101941Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: malformed EVPN routes with inconsistent length fields crash the routing daemon on re-advertisementhighCVE-2026-101942+1Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026Junos rpd: crafted BGP EVPN update message crashes the routing daemonhighCVE-2026-101943Firmware, BMC & network fabricOct 14, 2026Oct 14, 2026