NVIDIA faces physical theft and critical software vulnerability

NVIDIA is facing two distinct security-related issues involving its hardware and software.

In a physical security incident, thieves targeted trailers belonging to PlusAI, hoping to steal high-value NVIDIA graphics cards. However, the thieves reportedly found only sand inside the trailers. The theft occurred near Newark, California, where the thieves used their own vehicles to hitch and transport the stolen trailers.

In the digital realm, security researcher Michael Katchinskiy of Lava Security identified a critical vulnerability (CVE-2026-47483) in the NVIDIA Data Center GPU Manager (DCGM) Exporter. With a CVSS score of 8.2, the flaw allows unauthenticated attackers to exhaust memory via unsecured Go endpoints. This can crash monitoring services and significantly slow down AI computing workloads.

The vulnerability affects a wide range of hardware, from consumer RTX 4090 and 5090 models to high-performance H100 and Blackwell Ultra B300 accelerators. Impacted cloud providers include Voltage Park, Lambda, Northern Data, DigitalOcean, and Nebius. Research indicates that exposed systems are primarily located in the United States, Romania, and China.