NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an…
NVIDIA Triton Inference Server
More for NVIDIA Triton Inference Server RSS feed for NVIDIA Triton Inference Server
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-24207
- Affects
- NVIDIA Triton Inference Server
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 20, 2026
- Source last modified
- July 24, 2026
Description
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
Description quoted from the NVD record.
Who is affected
NVIDIA Triton Inference Server is software that runs AI models so that other programs and services can send them requests and get answers. This flaw lets an attacker get around the server's sign-in checks (authentication bypass). If an attacker succeeds, they might be able to run their own commands on the server, gain more access than they should have, change data, knock the service offline, or see information they should not. No specific affected versions or setups are named for this flaw, so any organization running this product should check it. This flaw is rated Critical.
What to do
- Find out whether your organization runs NVIDIA Triton Inference Server, and who installed it or looks after it: someone on your staff, or an IT provider or vendor.
- No fixed version is named for this flaw yet. The person who runs the server should check the vendor advisory linked on this page for a fixed release and install it as soon as one is available.
- If an IT provider or vendor runs the server for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of July 24, 2026 and reviewed before publishing.