AIStore's legacy ETL API accepted Kubernetes security settings from the caller

Storage systems for AI workloads sit between a cluster and a dataset, and increasingly they do more than store bytes: they run transformation jobs next to the data. CVE-2026-65162 in NVIDIA AIStore is a warning about what happens when the configuration of those jobs is taken from the network.

The record

The CVE entry describes NVIDIA AIStore for Linux and a vulnerability in the legacy ETL Kubernetes PodSpec initialization API. A remote attacker may supply Kubernetes host-namespace and container-security settings. The record lists consequences across code execution, privilege escalation, information disclosure, data tampering and denial of service. Affected versions are listed as 0 through 4.9.

The CVSS 3.1 score is 10.0 with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H .…