NVIDIA DGX OS is affected by a hard-coded cryptographic key vulnerability due to identical SSH host keys, creating a risk of man-in-the-middle attacks.

This is a CWE-321 vulnerability involving the use of hard-coded cryptographic keys. Because identical SSH host keys are generated during the factory provisioning/cloning process, the security of SSH connections is undermined, allowing for potential impersonation.

The use of identical SSH host keys across multiple systems significantly weakens the security posture of the infrastructure. This allows for man-in-the-middle (MITM) attacks where an attacker could intercept or manipulate traffic intended for legitimate systems, potentially leading to total system compromise or unauthorized access to sensitive environments.

Immediate Action: Update affected NVIDIA DGX Spark systems to the version indicated in the vendor advisory (OTA0 or later) to resolve the provisioning flaw.

Proactive Monitoring: Review SSH logs and monitor for anomalous key fingerprint changes or unauthorized access attempts across the DGX cluster.

Compensating Controls: If immediate patching is not feasible, consider manually regenerating SSH host keys on all affected systems and implementing stricter network-level access controls to isolate affected hardware.

Public Exploit Available: Unknown

This vulnerability is critical for environments relying on SSH for secure administrative access. Administrators must verify their current version and apply the vendor-provided update immediately to ensure unique cryptographic identities for each machine in the fleet.