A vulnerability classified as critical was found in NI grpc-device and InstrumentStudio up to 2.17.0 . This affects an unknown function. Executing a manipulation can lead to untrusted pointer dereference. This vulnerability appears as CVE-2026-48137 . The attack may be performed from remote. There is no available exploit.