Lava Discovers Thousands of Exposed GPU Servers and High-Severity NVIDIA Monitoring Flaw

Security researchers at Lava have uncovered thousands of GPU servers exposed to the public internet without proper access controls, alongside a high-severity vulnerability in NVIDIA's DCGM Exporter, a widely used GPU monitoring tool. The DCGM Exporter flaw could allow unauthorized actors to access sensitive GPU telemetry data or interfere with monitoring infrastructure in AI training and inference environments. The scale of exposed GPU servers suggests that many organizations deploying AI compute infrastructure are not applying standard network hardening practices. For developers and MLOps teams managing GPU clusters — whether on-premises or in the cloud — this research is a direct call to audit network exposure and patch DCGM Exporter installations. The findings highlight that AI infrastructure security is lagging behind the rapid pace of GPU deployment.