A high-severity vulnerability in NVIDIA DCGM Exporter, a widely used tool for monitoring GPUs across AI servers and clusters, could let unauthenticated attackers disrupt monitoring and potentially AI workloads without authentication, leading to denial of service (DOS) and information disclosure. 

Tracked as CVE-2026-47483 (CVSS 8.2), the vulnerability was detailed by Lava Security, which mentioned uncovering 2,100 servers leaking telemetry from 12,096 GPUs to anyone online.

About a quarter of exposed DCGM Exporter hosts served Go’s /debug/pprof/ profiling endpoints alongside /metrics, the report said. With enough concurrent unauthenticated requests, researchers estimate the exporter could run out of memory and crash, cutting off visibility into GPU health and activity. 

The resulting CPU and RAM pressure could also slow training or inference workloads on the same host. Lava reproduced the behavior using NVIDIA’s official, unmodified DCGM Exporter container and tested the resource exhaustion only in a controlled environment.

“We found 12,096 public Node Exporter hosts reporting mlx5 metrics from NVIDIA/Mellanox InfiniBand and RoCE adapters, exposing adapter models, firmware versions, link state and fabric activity,” researchers said. “Many also revealed hostnames, OS and kernel versions, and BIOS details.”

Lava ran four scans between March and May 2026. Every exposed host returned metrics over plaintext HTTP, and none required authentication. “Current-generation Blackwell hardware was wide open, including 312 NVIDIA B200s, and 32 B300s, with their telemetry accessible without authentication.”

“Anyone who could reach these endpoints could see what hardware organizations were running, how heavily it was being used, and details about the AI infrastructure around it,” the report said. 

Endpoints in the United States accounted for 5,274 GPUs (44%). Romania followed with 2,054 (17%), and China had 1,967 (16%).

Many exposed services ran on customer infrastructure associated with neoclouds, also known as GPU cloud providers, including:

• Voltage Park, 
• Lambda, 
• Northern Data, 
• DigitalOcean.

The largest documented group was associated with Voltage Park: 672 public node_exporter hosts and 71 public DCGM Exporter hosts. Voltage Park confirmed that most of the node_exporter instances and all the DCGM Exporter instances were customer-deployed.

NVIDIA published a security bulletin on CVE-2026-47483 in July 2026. Besides upgrading to version 4.8.2 or later, operators should take these steps:

• Keep --enable-pprof disabled unless profiling is explicitly required.
• Bind exporters to loopback or private interfaces.
• Restrict access with firewall rules or security groups.

A 2024 report from Aqua Security said that over 300,000 Prometheus servers and exporters were exposed to DoS attacks. 

In June, reports said OpenAI Codex uncovered an HTTP/2 bomb DoS exploit affecting nginx, Apache, and Microsoft IIS.