NVIDIA DCGM Exporter flaw can crash GPU monitoring
A high-severity vulnerability in NVIDIA's DCGM Exporter (CVE-2026-47483) allows unauthenticated attackers to knock the GPU monitoring service offline and could interfere with AI workloads running on the same machine. The research comes from Lava, which also found hundreds of exposed GPU servers on the internet.
Lava reported the issue to NVIDIA. The company gave it a CVSS score of 8.2 and released a security bulletin on July 28, 2026.
What the exporter reveals
GPU servers are machines built around graphics processing units and are used for AI, machine learning and scientific computing. DCGM Exporter reads data straight from the GPUs on a host, such as temperature, utilization, memory usage, power draw and error events. It publishes this data over HTTP, usually on port 9400, so that tools like Prometheus can collect it.