NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
NVIDIA Triton Inference Server
More for NVIDIA Triton Inference Server RSS feed for NVIDIA Triton Inference Server
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-47627
- Affects
- NVIDIA Triton Inference Server
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 18, 2026
- Source last modified
- October 22, 2026
Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.
Description quoted from the NVD record.
Who is affected
NVIDIA Triton Inference Server is software that runs AI models so other programs and services can send it questions and get answers back. This flaw affects NVIDIA Triton Inference Server for Linux. No specific affected versions are named for this flaw. An attacker could trick the server into reaching files or folders outside the places it is supposed to use. A successful attack might stop the server from working. This flaw is rated Critical. If your organization runs its own AI tools on Linux servers, or pays someone to run them for you, check whether this product is part of that setup.
What to do
- Find out who installed or runs NVIDIA Triton Inference Server for your organization. This could be a staff member, a volunteer, or an IT provider or vendor who manages it for you.
- No fixed version is named for this flaw yet. The person who runs the server should check the vendor advisory linked on this page for a fixed release.
- When a fixed release is available, have that person install it on every Linux system that runs NVIDIA Triton Inference Server.
- If an IT provider or vendor runs the server for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 22, 2026 and reviewed before publishing.