NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files…
NVIDIA Triton Inference Server
More for NVIDIA Triton Inference Server RSS feed for NVIDIA Triton Inference Server
- Severity
- High, CVSS 7.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- Record
- CVE-2026-47487
- Affects
- NVIDIA Triton Inference Server
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 4, 2026
- Source last modified
- October 24, 2026
Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Description quoted from the NVD record.
Who is affected
NVIDIA Triton Inference Server is software that runs AI models so that other programs can send them requests and get answers. This flaw affects the Linux version of the product, specifically the add-on that connects it to MLflow, a tool for managing AI models. By putting a file location into a model name given to that add-on, a user could read, write to or change files outside the folder where the models are kept. This could expose information and stop the service from working. No specific affected versions are named for this flaw. This flaw is rated High.
What to do
- If someone in your organization installed or runs NVIDIA Triton Inference Server, that person should act on this flaw. If an IT provider or vendor manages it for you, they are the ones to act.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release and install it as soon as it is available.
- Ask whoever runs the server whether the MLflow add-on is in use, since that is the part with the problem.
- If an IT provider or vendor runs the server for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.