NVIDIA, the artificial intelligence computing giant, has released urgent patches for two software flaws in its ChatRTX for Windows app, as well as a warning that users are vulnerable to code execution and data tampering attacks.
According to an NVIDIA advisory, the flaws have a ‘high-risk’ rating and could be used to launch malicious code through cross-site scripting attacks. The security flaws, identified as CVE-2024-0082 and CVE-2024-0083, affect ChatRTX for Windows 0.2 and earlier versions.
Developers and AI enthusiasts use the NVIDIA ChatRTX app to connect PC LLMs to their own data through a popular technique known as retrieval-augmented generation (RAG).
Read More: Code Execution Flaws Haunt NVIDIA ChatRTX for Windows
For more such updates follow us on Google News ITsecuritywire News. Please subscribe to our Newsletter for more updates.