H3-2026-1065¶
NVIDIA AIStore Object Rename Path Traversal Arbitrary File Write Vulnerability
| Category | VULNERABILITY |
| Base Score | 9.3 |
Description¶
NVIDIA AIStore is a scalable storage system for AI and machine learning workloads. The objMv function on AIStore target nodes renames an object without validating the destination name, and processes destination paths containing traversal sequences. Remote attackers can issue a rename-obj action with a destination name containing dot-dot-slash sequences to redirect the write outside the bucket's mountpath directory. The target node then creates the renamed file at the attacker-chosen filesystem path. The root cause is missing path validation (CWE-22) in the object rename handler.
Impact¶
Successful exploitation lets remote attackers write arbitrary content to any path reachable by the target process. This can be leveraged for code execution through cron job files, SSH key injection, or overwritten system binaries. The write persists until the planted file is located and removed. Organizations running AIStore for AI training data pipelines risk full target host compromise.