{"vulnerability": "CVE-2026-65164", "sightings": [{"uuid": "698bf2b9-6182-4e95-92f5-5a81acb2aee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65164", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117433938783298279", "content": "CVE-2026-65164  NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.\nhttps://www.cve.org/CVERecord?id=CVE-2026-65164https://nvd.nist.gov/vuln/detail/CVE-2026-65164https://www.cve.org/CVERecord?id=CVE-2026-65164https://github.com/NVIDIA/product-security/tree/main/2026/5889#NVIDIA #AIStoreframework#CVE_2026_65164#bot", "creation_timestamp": "2026-10-13T13:55:01.349699Z"}]}