NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an…
NVIDIA Triton Inference Server
More for NVIDIA Triton Inference Server RSS feed for NVIDIA Triton Inference Server
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-24206
- Affects
- NVIDIA Triton Inference Server
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 20, 2026
- Source last modified
- July 24, 2026
Description
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.
Description quoted from the NVD record.
Who is affected
NVIDIA Triton Inference Server is software that runs AI models so other programs and apps can send them requests and get answers back. This flaw affects the product, but no specific versions, components or setups are named for it. An attacker could get around the checks that confirm who is making a request. If that works, the attacker might gain more control than they should have, knock the service offline, or see information they should not see. This flaw is rated Critical.
What to do
- If your organization runs NVIDIA Triton Inference Server itself, the person who installed or runs it should handle this flaw.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release.
- When a fixed release is available, install it on every copy of the server your organization runs.
- If an IT provider or vendor runs it for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of July 24, 2026 and reviewed before publishing.