CVE-2026-24176

CVE-2026-24176 affects NVIDIA KAI Scheduler and allows attackers to bypass authorization controls through improper handling of cross-namespace pod references, potentially leading to data tampering. The vulnerability carries a CVSS score of 4.3 (Medium severity) with a network-accessible attack vector requiring low complexity and user authentication, but no user interaction. The exploit presents a low confidentiality and availability risk while enabling integrity compromise. Currently, this vulnerability demonstrates minimal exploitation risk with a very low EPSS score of 0.00025, no known active exploitation, and absence from CISA's Known Exploited Vulnerabilities catalog, indicating limited community attention and exploitation activity at this time.