Researchers find more than 2,000 internet-exposed NVIDIA GPU monitors, some open to a flaw that crashes the service

Researchers at Lava found more than 2,000 servers exposing NVIDIA's DCGM Exporter to the internet. DCGM Exporter is a monitoring tool for GPU servers used in AI, machine learning and scientific computing. It reads GPU temperature, utilization, memory use, power draw and error events, along with each GPU's model and unique ID, and publishes that data over HTTP, usually on port 9400, for systems like Prometheus to collect. Lava researcher Michael Katchinskiy said this is enough for an outsider to see what hardware a server runs, how heavily it is used, and whether it is having errors. Help Net Security reports that hundreds of the exposed servers were vulnerable to CVE-2026-47483. The high-severity flaw lets unauthenticated attackers crash the monitoring service, which could disrupt AI workloads. Lava reported it to NVIDIA, which rated it 8.2 on the CVSS scale and published a security bulletin on July 28, 2026. SecurityWeek's weekly roundup also noted that exposed NVIDIA GPU monitors leak telemetry. Operators running the exporter should make sure it is patched and not reachable from the public internet.