How We Found Thousands of Expo... Note

How We Found Thousands of Exposed NVIDIA GPUs and a Way to Disrupt Them (CVE-2026-47483)

The NVIDIA DCGM Exporter is a popular tool for monitoring GPU metrics on AI servers. Researchers found thousands of these monitoring endpoints were publicly accessible on the internet. This exposed sensitive information about GPU infrastructure. A critical vulnerability, CVE-2026-47483 with a CVSS score of 8.2, was identified. This vulnerability allows unauthenticated attackers to exhaust server resources and crash GPU monitoring. Such an attack could disrupt critical AI workloads remotely. Over 2,100 GPU servers were found to be exposed, detailing telemetry from more than 12,000 GPUs. The estimated value of these exposed GPUs is around $100 million, including cutting-edge models. Interestingly, 60% of scanned GPUs showed zero utilization, indicating potential underuse. NVIDIA has since patched the vulnerability after responsible disclosure by the researchers.