CVE-2026-47623 Overview
CVE-2026-47623 is a deserialization of untrusted data vulnerability [CWE-502] affecting NVIDIA Dynamo for Linux. An unauthenticated remote attacker can submit crafted serialized objects that the application processes without validation. Successful exploitation can lead to denial of service and data tampering within the affected environment.
The vulnerability carries a CVSS 3.1 score of 8.2 and is exploitable over the network with low attack complexity and no privileges or user interaction required. The EPSS probability is 0.325% (24.99th percentile) as of 2026-08-06.
Critical Impact
Remote attackers can trigger deserialization of attacker-controlled data to cause service disruption and manipulate application data without authentication.
Affected Products
- NVIDIA Dynamo for Linux
Discovery Timeline
- 2026-08-04 - CVE-2026-47623 published to the National Vulnerability Database (NVD)
- 2026-08-06 - Last updated in NVD database
Technical Details for CVE-2026-47623
Vulnerability Analysis
CVE-2026-47623 stems from insecure deserialization in NVIDIA Dynamo for Linux. The application accepts serialized input from a network-reachable interface and reconstructs objects without verifying the source, type, or integrity of the data. This allows an attacker to influence the object graph produced during deserialization.
When an application deserializes untrusted data, attacker-supplied fields can drive control flow through magic methods, gadget chains, or type confusion during object reconstruction. In the context of CVE-2026-47623, this leads to two documented outcomes: high-impact denial of service and limited data tampering. Confidentiality is not affected according to the CVSS vector.
The issue is categorized under CWE-502: Deserialization of Untrusted Data, a class of flaws that has historically produced remote code execution and service disruption when object deserializers accept arbitrary types.
Root Cause
The root cause is the absence of trust boundaries around a deserialization routine in NVIDIA Dynamo. The service reconstructs objects from network-supplied byte streams without allow-listing safe classes, verifying signatures, or enforcing schema validation before instantiation.
Attack Vector
Exploitation occurs over the network against a Dynamo endpoint that accepts serialized payloads. An attacker crafts a malicious serialized blob targeting classes reachable in the runtime and delivers it to the vulnerable interface. Because no authentication is required, any network-adjacent adversary who can reach the service can attempt exploitation.
No verified public proof-of-concept code is available at the time of writing. Refer to the NVIDIA Product Security advisory for vendor technical details.
Detection Methods for CVE-2026-47623
Indicators of Compromise
- Unexpected process crashes, hangs, or restart loops of the NVIDIA Dynamo service coinciding with inbound network requests.
- Malformed or unusually large serialized payloads sent to Dynamo network listeners.
- Anomalous modifications to Dynamo-managed data or configuration state without a corresponding administrative action.
Detection Strategies
- Inspect network traffic to Dynamo endpoints for serialized object magic bytes or content types associated with the deserializer in use.
- Instrument the Dynamo runtime to log class instantiation during deserialization and alert on classes outside an expected allow-list.
- Correlate service crash telemetry with source IPs of recent requests to identify probing or exploitation attempts.
Monitoring Recommendations
- Forward Dynamo application logs, host telemetry, and network flow data to a centralized analytics pipeline for correlation.
- Alert on repeated deserialization exceptions, which often precede a working exploit as attackers tune payloads.
- Track availability metrics for Dynamo workloads to detect denial-of-service conditions triggered by malformed input.
How to Mitigate CVE-2026-47623
Immediate Actions Required
- Apply the fix referenced in the NVIDIA Product Security repository for advisory 5842 as soon as it is available for your deployment.
- Restrict network access to NVIDIA Dynamo endpoints to trusted management networks using firewalls or security groups.
- Inventory hosts running NVIDIA Dynamo for Linux and prioritize patching those exposed to untrusted networks.
Patch Information
Consult the NVIDIA Product Security advisory and the NVD entry for CVE-2026-47623 for the authoritative list of fixed versions and upgrade guidance.
Workarounds
- Place Dynamo endpoints behind an authenticated reverse proxy or service mesh that terminates untrusted traffic before it reaches the deserializer.
- Disable or block the network interfaces that accept serialized payloads if they are not required for operations.
- Enforce strict egress and ingress network policies around Dynamo hosts to limit reachability from untrusted segments.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
