AMD Device Metrics Exporter Unrestricted IP Binding RCE
CVE-2026-0481 Published on May 15, 2026

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

NVD

Vulnerability Analysis

CVE-2026-0481 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE

Weakness Type

Binding to an Unrestricted IP Address

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.


Affected Versions

AMD Instinct™ MI210: AMD Instinct™ MI250: AMD Instinct™ MI300A: AMD Instinct™ MI300X: AMD Instinct™ MI325X: AMD Instinct™ MI350X: AMD Instinct™ MI355X: AMD Instinct™ MI308X: AMD Instinct™ MI250X:

Exploit Probability

EPSS
0.31%
Percentile
23.04%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.