Nvflare (Nvidia) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 142 known versions, newest CVE from 2026-04-28. Vendor: Nvidia.

CVEs of Nvflare

• CVE-2026-24186 - CVSS 8.8 (high), 2026-04-28: NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message.…
• CVE-2026-24178 - CVSS 9.8 (critical), 2026-04-28: NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization…
• CVE-2026-24204 - CVSS 6.5 (medium), 2026-04-28: NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this…
• CVE-2022-34668 - CVSS 9.8 (critical), 2022-08-29: NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network…
• CVE-2022-31605 - CVSS 9.8 (critical), 2022-07-01: NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The…
• CVE-2022-31604 - CVSS 9.8 (critical), 2022-07-01: NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe…