NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that sha…

CVE-2026-24255 affects NVIDIA Dynamo for Linux, specifically in its multimodal embedding cache component. The vulnerability allows an attacker to trigger a hash collision by submitting images that share identical pixel byte sequences but differ in dimensions. This flaw in the hashing mechanism can be exploited to cause data tampering. The vulnerability resides in the AI/ML inference serving framework NVIDIA Dynamo. No authentication bypass or remote code execution is mentioned, but data integrity is at risk. NVIDIA has published a security advisory through their product-security GitHub repository. The CVE is currently in 'Received' status at NVD, indicating it is newly submitted. Users of NVIDIA Dynamo on Linux systems should monitor for patches and apply mitigations as they become available.