{"id":"CVE-2026-100962","kind":"vulnerability","aliases":["CVE-2026-100962"],"related":[],"title":"NVIDIA NeMo Export-Deploy: multimodal deployment flaw allows server-side request forgery","description":"NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might cause information disclosure.","summary":"NVIDIA NeMo Export-Deploy, a tool for exporting and deploying AI models, has a server-side request forgery flaw in its multimodal deployment. An attacker can make the server send requests to destinations of their choosing, which may disclose information.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-deployment","ai-tooling","multimodal","nemo","nvidia"],"not_affected_if":["no-multimodal-deployment"],"how_to_check":"Check whether you run the NVIDIA-NeMo/Export-Deploy library (pip show nemo-export-deploy, or the repo checkout) and whether you expose its multimodal deployment endpoint. NVIDIA has not yet published affected versions; compare against the NVIDIA bulletin once it appears.","fix":null,"status":"open","published_at":"2026-11-10T13:18:18+00:00","first_seen_at":"2026-11-10T13:22:02+00:00","triaged_at":"2026-11-10T13:23:33+00:00","updated_at":"2026-11-10T13:24:48+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-11-10T13:23:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"NVIDIA NeMo Export-Deploy: multimodal deployment flaw allows server-side request forgery","impact":"medium","summary":"NVIDIA NeMo Export-Deploy, a tool for exporting and deploying AI models, has a server-side request forgery flaw in its multimodal deployment. An attacker can make the server send requests to destinations of their choosing, which may disclose information.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["nvidia","nemo","ai-deployment","multimodal"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"server makes attacker-chosen requests and leaks internal information","analyst_note":"Check the NVD entry and NVIDIA's security bulletin for affected versions, fixed versions and whether the multimodal endpoint needs authentication.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-multimodal-deployment"],"who_is_affected":"Teams running NVIDIA NeMo Export-Deploy for multimodal model deployment are exposed. The sources do not say which configurations or versions are vulnerable, or whether the multimodal endpoint must be reachable from outside. Teams not using NeMo Export-Deploy for multimodal deployment can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000716,"input_tokens":4537,"output_tokens":524,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Check the NVD entry and NVIDIA's security bulletin for affected versions, fixed versions and whether the multimodal endpoint needs authentication.","search":"'-100962':17A,20A '-2026':16A,19A 'ai':22B,25B,41B 'ai-deploy':21B 'ai-tool':24B 'allow':9A 'attack':56B,88C 'caus':90C,104C 'choos':67B 'contain':80C 'could':89C 'cve':15A,18A 'deploy':5A,7A,23B,34B,40B,54B,76C,85C 'destin':64B 'disclos':70B 'disclosur':106C 'exploit':99C 'export':4A,33B,38B,75C 'export-deploy':3A,32B,74C 'flaw':8A,50B 'forgeri':14A,49B,96C 'inform':71B,105C 'make':58B 'may':69B 'might':103C 'model':42B 'multimod':6A,27B,53B,84C 'nemo':2A,28B,31B,73C 'nvidia':1A,29B,30B,72C 'platform':79C 'request':13A,48B,62B,95C 'send':61B 'server':11A,46B,60B,93C 'server-sid':10A,45B,92C 'side':12A,47B,94C 'success':98C 'tool':26B,36B 'vulner':82C,102C","nicknames":[],"mitigations":[],"who_affected":"Teams running NVIDIA NeMo Export-Deploy (all platforms per NVD) and serving models through its multimodal deployment are exposed. NVD's CVSS vector (AV:N/PR:N, low confidentiality impact) indicates network-reachable without authentication, so a server reachable by untrusted users could be made to send requests to attacker-chosen destinations. Affected and fixed versions are not published yet. Teams not using Export-Deploy's multimodal deployment can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aideployment","aitooling","medium","multimodal","nemo","nvidia"],"campaign_type":null,"search_a":"'-100962':17A,20A '-2026':16A,19A 'allow':9A 'cve':15A,18A 'deploy':5A,7A 'export':4A 'export-deploy':3A 'flaw':8A 'forgeri':14A 'multimod':6A 'nemo':2A 'nvidia':1A 'request':13A 'server':11A 'server-sid':10A 'side':12A","search_b":"'ai':22B,25B,41B 'ai-deploy':21B 'ai-tool':24B 'attack':56B 'choos':67B 'deploy':23B,34B,40B,54B 'destin':64B 'disclos':70B 'export':33B,38B 'export-deploy':32B 'flaw':50B 'forgeri':49B 'inform':71B 'make':58B 'may':69B 'model':42B 'multimod':27B,53B 'nemo':28B,31B 'nvidia':29B,30B 'request':48B,62B 'send':61B 'server':46B,60B 'server-sid':45B 'side':47B 'tool':26B,36B","search_c":"'attack':88C 'caus':90C,104C 'contain':80C 'could':89C 'deploy':76C,85C 'disclosur':106C 'exploit':99C 'export':75C 'export-deploy':74C 'forgeri':96C 'inform':105C 'might':103C 'multimod':84C 'nemo':73C 'nvidia':72C 'platform':79C 'request':95C 'server':93C 'server-sid':92C 'side':94C 'success':98C 'vulner':82C,102C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T13:18:18+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"psirt@nvidia.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-100962","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100962","severity":null,"published_at":"2026-11-10T13:18:18+00:00","modified_at":"2026-11-10T13:18:18+00:00","first_seen_at":"2026-11-10T13:22:02+00:00","fetched_at":"2026-11-10T13:22:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-100962:2455","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100962","severity":null,"published_at":"2026-11-10T13:24:48+00:00","modified_at":"2026-11-10T13:24:48+00:00","first_seen_at":"2026-11-10T13:24:48+00:00","fetched_at":"2026-11-10T13:24:48+00:00","note":"NVD only (CVSS 5.3, AV:N/PR:N from psirt@nvidia.com). No NVIDIA bulletin in the NVIDIA/product-security 2026 index or Export-Deploy GitHub advisories as of 2026-11-10 13:30; affected/fixed versions unknown. Nothing verified. Revisit when the bulletin lands. Exa search worked; X not checked.","cites":["https://nvd.nist.gov/vuln/detail/CVE-2026-100962"]}],"documents":[{"id":115208,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100962","title":"NVD: CVE-2026-100962","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}