H3-2026-1076¶
NVIDIA AIStore ETL Management Authentication Bypass Vulnerability
| Category | SECURITY_CONTROLS |
| Base Score | 7.6 |
Description¶
NVIDIA AIStore, a scalable storage system for AI applications, contains an authentication bypass in its ETL management handler. The handler enforces the AceAdmin privilege check only for PUT and DELETE requests, leaving the POST and GET methods unauthenticated even when the cluster has AuthN enabled. Remote attackers with network access to the AIStore proxy can invoke privileged ETL operations, including starting and stopping ETL jobs and listing job state and logs, without presenting any credentials. The flaw exists because the per-method authorization check in the ETL request router was incomplete rather than absent, so some privileged operations were left exposed by omission.
Impact¶
Remote attackers can start, stop, and enumerate ETL pipelines and read their logs and metrics without authorization, undermining the access control model of the cluster. Unauthorized control of data transformation pipelines can disrupt AI/ML data processing workflows and expose operational details of the cluster. Organizations running AIStore for machine learning data pipelines in shared or multi-tenant environments are most exposed. Exposure persists on any AuthN-enabled cluster until patched.