CVE-2026-24204

NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:nvidia:nvflare:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

04 May 2026, 14:33

Type Values Removed Values Added
First Time Linux
Nvidia
Nvidia nvflare
Apple macos
Apple
Linux linux Kernel
CPE cpe:2.3:a:nvidia:nvflare:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
References () https://nvd.nist.gov/vuln/detail/CVE-2026-24204 - () https://nvd.nist.gov/vuln/detail/CVE-2026-24204 - US Government Resource
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5819 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5819 - Vendor Advisory
References () https://www.cve.org/CVERecord?id=CVE-2026-24204 - () https://www.cve.org/CVERecord?id=CVE-2026-24204 - Third Party Advisory

28 Apr 2026, 19:36

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-28 19:36

Updated : 2026-05-04 14:33


NVD link : CVE-2026-24204

Mitre link : CVE-2026-24204

CVE.ORG link : CVE-2026-24204


JSON object : View

Products Affected

nvidia

  • nvflare

apple

  • macos

linux

  • linux_kernel
CWE
CWE-20

Improper Input Validation