SA-26-109 High

NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path…

NVIDIA Triton Inference Server

Severity
High, CVSS 7.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Record
CVE-2026-24208
Affects
NVIDIA Triton Inference Server
Known exploited
Not listed in the CISA Known Exploited Vulnerabilities catalog
Published
Record first published by the source
May 20, 2026
Source last modified
July 24, 2026

Description

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.

Description quoted from the NVD record.

Who is affected

NVIDIA Triton Inference Server is software that runs AI models on a server so that other programs can send it requests and get answers back. This flaw affects NVIDIA Triton Inference Server, and no specific affected versions, components or setups are named for it. An attacker could cause a path traversal problem, which means tricking the software into reaching file locations it should not. If this succeeds, it might lead to a denial of service, meaning the server could stop working or stop answering requests. This flaw is rated High.

What to do

  1. Find out whether your organization uses NVIDIA Triton Inference Server. If it does not, this flaw does not affect you.
  2. If someone in your organization installed or runs it, that person should act on this. If an IT provider or vendor runs it for you, send them this advisory and ask when the update will be done.
  3. No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release.
  4. When a fixed release is available, install it on every server that runs NVIDIA Triton Inference Server.

Analysis written from the source record as of July 24, 2026 and reviewed before publishing.

Sources

MORE ADVISORIES

See all