CVE-2026-100962

Multimodal requests could make a NeMo service fetch unintended resources

NVIDIA · NeMo Export-Deploy multimodal deployment

First documented disclosure · Review checkpoint

Summary

A caller could influence network requests made by a multimodal NeMo deployment.

Severity and exploitation evidence

Medium · 5.3/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The affected deployment accepted input that could direct a server-side fetch to an unintended destination. NVIDIA classifies the issue as server-side request forgery.

Conditions required

An affected multimodal service accepts attacker-controlled input and can reach the requested resource.

Potential impact

Information accessible to the service could be disclosed. NVIDIA does not identify a specific exposed system.

Affected versions and configurations

Through 0.7.0 on all platforms.

Fix and mitigation status

0.7.1.

Practical next steps

Install NeMo Export-Deploy 0.7.1 and restrict outbound access from inference services.

Operating lesson

Constrain the destinations that a multimodal worker can reach when it processes external content.

Evidence and limits

NVIDIA identifies potential information disclosure. It names no data loss or affected deployment.

Sources