NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 28, 2026 · NIST NVD

   Detected

   NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.

2. Jun 17, 2026 · NIST NVD

   Updated

   NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.

Affected

• cpe nvidia/nvflareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-24186

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-24186

  NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerability might lead to code execution.

  nvd.nist.gov

References

• US Government Resource · nvd.nist.gov
• Vendor Advisory · nvidia.custhelp.com
• Third Party Advisory · cve.org