AegisSec Research says AIStore versions before 5.0 were affected, and that Nvidia removed the vulnerable feature in its October 13 release to close a route to host takeover.
Nvidia removed a legacy AIStore feature that could let a remote attacker gain full control of an underlying Linux host, according to AegisSec Research. Researcher Mohamed Lemine Ahmed Jidou’s account, dated October 15, 2026, identifies versions before 5.0 as affected and dates the fixed release to October 13.
AIStore is Nvidia’s open-source object storage system. Its ETL engine—short for extract, transform and load—lets users process data directly on storage machines through Kubernetes pods, which run containers. The affected interface accepted user-supplied instructions describing how those pods should run.
The Hacker News reported the disclosure on October 22, identifying the flaw as CVE-2026-65162, also called ShadowForge. It reported a Common Vulnerability Scoring System severity score of 10.0, the maximum.
According to Jidou, the legacy application programming interface, or API, checked whether submitted pod specifications met operational requirements, such as readiness checks and ports. It did not remove security-sensitive settings before forwarding the specifications to Kubernetes. Those settings could grant a container elevated privileges and access to the host’s processes.
Jidou says an attacker could use that access to escape the container and obtain root access—full administrative control—on the storage machine. The reported risk therefore extends beyond a single data-processing task to the host running it.
The disclosed proof of concept tested AIStore’s processing code in memory. Jidou says the test deliberately excluded environmental differences, including Kubernetes Pod Security Admission settings, which govern what pods a cluster permits. That test was not a measurement of exposure across deployed clusters. Deployment prevalence and active exploitation remain unconfirmed.
The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
Jidou reports that version 5.0 removed the feature that accepted raw Kubernetes pod specifications, rather than adding filters to it. The replacement accepts a different ETL message based on pre-built container images and does not accept those raw specifications.
For defenders managing versions before 5.0, Jidou recommends checking Kubernetes audit logs for AIStore’s service account creating pods with unusual security settings. His account identifies version 5.0 as the release that removes the vulnerable route.
The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min
The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min
