Exposed NVIDIA DCGM Exporters vulnerable to unauthenticated crash flaw
Summary
Researchers found more than 2,000 internet-exposed GPU servers running NVIDIA DCGM Exporter. CVE-2026-47483 lets unauthenticated requests to profiling endpoints crash the exporter; NVIDIA recommends upgrading to version 4.8.2 or later.
Key points
- NVIDIA rated CVE-2026-47483 at 8.2 CVSS; the flaw affects DCGM Exporter.
- Researchers found more than 2,000 internet-exposed GPU servers across nearly 300 organizations.
- Unauthenticated requests to exposed Go profiling endpoints can consume memory and crash the exporter, potentially affecting host workloads.
- Exposed DCGM Exporter metrics revealed GPU models, identifiers, utilization and error information.
- Researchers also found 12,096 public Node Exporter hosts exposing server, operating system and network details.
- Upgrade DCGM Exporter to version 4.8.2 or later and keep the --enable-pprof flag off unless needed.
- Keep monitoring services off the public internet where possible; use private or loopback interfaces and access controls.
Article Details
- Vulnerability Types
- Unauthenticated denial of service through memory exhaustion
- Severity
- High (CVSS 8.2)
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- available
- Workarounds
- Upgrade DCGM Exporter to version 4.8.2 or later.
- Keep the --enable-pprof flag off unless profiling is needed.
- Keep Node Exporter, DCGM Exporter, and Prometheus off the public internet unless needed, and restrict access with loopback or private interfaces, firewall rules, or security groups.
CVE
People
Vendors
DigitalOceanSome of the exposed services ran on customer infrastructure at GPU cloud providers, including Voltage Park, Lambda, Northern Data and DigitalOcean.LambdaSome of the exposed services ran on customer infrastructure at GPU cloud providers, including Voltage Park, Lambda, Northern Data and DigitalOcean.Northern DataSome of the exposed services ran on customer infrastructure at GPU cloud providers, including Voltage Park, Lambda, Northern Data and DigitalOcean.NvidiaHundreds of internet-exposed GPU servers were found running vulnerable NVIDIA DCGM Exporter instances affected by CVE-2026-47483, which can be crashed by unauthenticated attackers and may disrupt AI workloads.Voltage ParkThe exposed monitoring services also leaked detailed GPU, server, and network information across thousands of systems, with impacts seen in environments tied to NVIDIA, Voltage Park, and other providers.
Products
4090Among the exposed hardware were NVIDIA’s Blackwell Ultra B300, H200 and H100 GPUs, built for large AI workloads, along with consumer RTX 5090 and 4090 cards.Blackwell Ultra B300Among the exposed hardware were NVIDIA’s Blackwell Ultra B300, H200 and H100 GPUs, built for large AI workloads, along with consumer RTX 5090 and 4090 cards.DCGM ExporterHundreds of internet-exposed GPU servers were found running vulnerable NVIDIA DCGM Exporter instances affected by CVE-2026-47483, which can be crashed by unauthenticated attackers and may disrupt AI workloads.H100Among the exposed hardware were NVIDIA’s Blackwell Ultra B300, H200 and H100 GPUs, built for large AI workloads, along with consumer RTX 5090 and 4090 cards.H200Among the exposed hardware were NVIDIA’s Blackwell Ultra B300, H200 and H100 GPUs, built for large AI workloads, along with consumer RTX 5090 and 4090 cards.Node ExporterNode Exporter exposed hardware, OS, and network details from thousands of hosts.Prometheusconsumption and error events, and publishes it over HTTP, typically on port 9400, for systems like Prometheus to collect.RTX 5090Among the exposed hardware were NVIDIA’s Blackwell Ultra B300, H200 and H100 GPUs, built for large AI workloads, along with consumer RTX 5090 and 4090 cards.
Countries
ChinaThe US hosted 5,274 of the exposed GPUs (44%), followed by Romania with 2,054 and China with 1,967.RomaniaThe US hosted 5,274 of the exposed GPUs (44%), followed by Romania with 2,054 and China with 1,967.United StatesThe US hosted 5,274 of the exposed GPUs (44%), followed by Romania with 2,054 and China with 1,967.
Industries
AIHundreds of internet-exposed GPU servers were found running vulnerable NVIDIA DCGM Exporter instances affected by CVE-2026-47483, which can be crashed by unauthenticated attackers and may disrupt AI workloads.Cloud Computingscientific computingGPU servers are computers built around GPUs and are used for AI, machine learning and scientific computing workloads.