CVE-2026-24178

published 2026-04-28

CVE-2026-24178: NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execution, and denial of service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nvidia	flare_sdk	—	—
nvidia	nvflare	< 2.7.2	2.7.2

CWE-639