SA-26-114 High

NVIDIA Triton Inference Server: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker…

NVIDIA Triton Inference Server

Severity
High, CVSS 7.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Record
CVE-2026-24215
Affects
NVIDIA Triton Inference Server
Known exploited
Not listed in the CISA Known Exploited Vulnerabilities catalog
Published
Record first published by the source
May 20, 2026
Source last modified
July 24, 2026

Description

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

Description quoted from the NVD record.

Who is affected

NVIDIA Triton Inference Server is software that runs AI models so that other programs can send them questions or data and get answers back. This flaw is in a part of the product called the DALI backend. An attacker could make the server use up its computing resources without limit. This might cause a denial of service, meaning the server stops working for the people and programs that rely on it. No specific affected versions are named for this flaw. This flaw is rated High.

What to do

  1. Find out who installed or runs NVIDIA Triton Inference Server for your organization: someone on your own staff, or an IT provider or vendor that manages it for you.
  2. If your own staff runs it, that person should act. No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release.
  3. Once a fixed release is available, have that person install it on every server running NVIDIA Triton Inference Server.
  4. If an IT provider or vendor runs it for your organization, send them this advisory and ask when the update will be done.

Analysis written from the source record as of July 24, 2026 and reviewed before publishing.

Sources

MORE ADVISORIES

See all