NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption b…

CVE-2026-47483 affects NVIDIA DCGM Exporter across all platforms, exposing a vulnerability in the /debug/pprof endpoints. An unauthenticated attacker can submit concurrent profiling requests to cause uncontrolled resource consumption. The vulnerability requires no authentication, lowering the barrier for exploitation significantly. Successful exploitation can lead to denial of service, potentially disrupting GPU monitoring and management operations. Additionally, information disclosure is a possible outcome, meaning sensitive profiling data could be exposed to unauthorized parties. The vulnerability is currently awaiting full analysis by NVD. NVIDIA has published a security advisory via their product-security GitHub repository. Organizations using DCGM Exporter in any environment should monitor for patches and apply mitigations promptly.