Skip to content

Nvidia’s new ChatGPT-like AI chatbot vulnerable to serious security risks

Nvidia's new ChatGPT-like AI chatbot vulnerable to serious security risks

A recent discovery of critical security vulnerabilities in Nvidia’s ChatGPT-like artificial intelligence (AI) chatbot technology has prompted Nvidia (NASDAQ: NVDA) to issue a prompt fix.

These vulnerabilities could have potentially allowed attackers to gain unauthorized access to user systems and data.

The good news is that Nvidia has addressed the issue swiftly, and there are no reports of these vulnerabilities being used in real-world attacks, as reported by Tom’s Hardware on March 28. 

Keep reading to learn more about the vulnerabilities, the potential risks, and how to protect yourself with the latest update.

Critical vulnerabilities in ChatRTX 0.2

Researchers discovered that ChatRTX 0.2 and all prior versions were susceptible to two major attack types: cross-site scripting (CWE-79) and improper privilege management (CWE-269). 

The CWE-79 attack refers to a scenario where attackers can insert harmful scripts into the interface of the chatbot. These scripts are designed to carry out different malicious actions that could harm the system, or cause the system to crash altogether.

On the other hand, the CWE-269 attack presents an even more serious threat. 

In essence, attackers with this level of control have the ability to manipulate the user’s computer in ways that can lead to severe consequences, such as data loss, system corruption, or unauthorized access to private information.

With this access, attackers can steal sensitive data stored on the system, tamper with important files or settings, and even install malware that can further compromise the system’s security and integrity. 

Nvidia swiftly addresses security vulnerabilities

Fortunately, Nvidia swiftly addressed this issue upon becoming aware of it, and there are currently no reports of these exploits being used.

The timely response and proactive measures taken by Nvidia in resolving the issue before potential exploitation reflect a commitment to user protection. 

Considering the personalized features of ChatRTX, the possibility of personal information exposure underscores the importance of promptly applying updates.

Update to stay safe

This incident underlines the critical importance of keeping software up to date, particularly for applications that handle sensitive data like ChatRTX. 

While the software remains in beta testing, users should prioritize downloading the latest update (version 0.2 or later) from the official Nvidia website. 

This simple step significantly strengthens your system’s security and safeguards your personal information while using ChatRTX.

Best Crypto Exchange for Intermediate Traders and Investors

  • Invest in 70+ cryptocurrencies and 3,000+ other assets including stocks and precious metals.

  • 0% commission on stocks - buy in bulk or just a fraction from as little as $10. Other fees apply. For more information, visit etoro.com/trading/fees.

  • Copy top-performing traders in real time, automatically.

  • eToro USA is registered with FINRA for securities trading.

30+ million Users
eToro is a multi-asset investment platform. The value of your investments may go up or down. Your capital is at risk. eToro USA LLC does not offer CFDs, only real Crypto assets available. Don’t invest unless you’re prepared to lose all the money you invest.

Read Next:

Weekly Finance Digest

By subscribing you agree with Finbold T&C’s & Privacy Policy

Related posts