NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A su…

NVIDIA Dynamo for Linux contains a vulnerability in its multimodal media fetcher component that allows server-side request forgery (SSRF) through DNS rebinding attacks. An attacker exploiting this flaw could manipulate DNS responses to bypass server-side protections and force the server to make unintended requests. A successful exploit could lead to information disclosure, potentially exposing sensitive internal data or infrastructure details. The vulnerability is tracked as CVE-2026-47617 and has been assigned a high criticality rating. NVIDIA has published a security advisory through their product-security GitHub repository. The issue affects Linux-based deployments of NVIDIA Dynamo. Users are advised to review the official advisory for patches and mitigations.