GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, openstack-barbican-2026.1, openstack-heat-2026.1, tritonserver-backend-vllm-cuda-13.0, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2,...

CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, openstack-barbican-2026.1, openstack-heat-2026.1, tritonserver-backend-vllm-cuda-13.0, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2,...

cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server パストラバーサル → DoS（Zip-Slip） このリポジトリにおける調査結果とPoCの完全なWriteup（イメージnvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0）。リポジトリは常に explicit に設定されており、gRPC経由で再起動なしのPoCが可能です。 目次 1. CVE概要 2. ラボ環境 3. 脆弱性の構造 4. 根本原因分析（26.05 → 26.06 の差分） 5. 攻撃経路：実際に影響を受けるのはどれか？ ...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kserve-sklearnserver, azureml-inference-server-http, kubeflow-katib, ansible-operator-fips, kserve-pmmlserver-fips, litellm, metaflow-service-fips, kserve-lgbserver, dask-kubernetes-fips, kubeflow-jupyter-web-app, awx, ggshield, k8s-sidecar,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kserve-sklearnserver, azureml-inference-server-http, kubeflow-katib, ansible-operator-fips, kserve-pmmlserver-fips, litellm, metaflow-service-fips, kserve-lgbserver, dask-kubernetes-fips, kubeflow-jupyter-web-app, awx, ggshield, k8s-sidecar,...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kserve-sklearnserver, azureml-inference-server-http, kubeflow-katib, ansible-operator-fips, kserve-pmmlserver-fips, litellm, metaflow-service-fips, kserve-lgbserver, dask-kubernetes-fips, kubeflow-jupyter-web-app, awx, ggshield, k8s-sidecar,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kserve-sklearnserver, azureml-inference-server-http, kubeflow-katib, ansible-operator-fips, kserve-pmmlserver-fips, litellm, metaflow-service-fips, kserve-lgbserver, dask-kubernetes-fips, kubeflow-jupyter-web-app, awx, ggshield, k8s-sidecar,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

CVE-2026-102274 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, metaflow-service-fips, litellm, airflow-postgres-fips, openstack-heat-2026.1, ggshield, netbox-fips, openstack-manila-2026.1, openstack-keystone-2026.1, openstack-heat-2025.2, azureml-inference-server-http-fips,...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (rocm)

Red Hat AI Inference Server 3.2.2 rocm is now available. Red Hat® AI Inference Server...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (cuda)

Red Hat AI Inference Server 3.2.2 cuda is now available. Red Hat® AI Inference Server...

Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.2.2 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton SageMaker 認証バイパスによる未認証RCE 認証されていない攻撃者は、NVIDIA Triton Inference ServerのSageMakerおよびVertex AI HTTPポート上の モデル管理サーフェスに到達できます — オペレーターの--http-restricted-api設定をバイパスします。 SageMaker MME LOADプリミティブとPythonバックエンドモデルを組み合わせることで、 攻撃者がTritonが読み取り可能なファイルシステムパスにモデルファイルを配置できる場合、...

CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: TRITONBATCHSTRATEGYPATH を介した任意の dlopen triton-inference-server/core のカスタムバッチ戦略ローダーにおける絶対パストラバーサル。モデル設定パラメータが検証されずに dlopenRTLDNOW | RTLDLOCAL に渡されるため、モデルの config.pbtxt に影響を与えられる者は誰でも、モデルロード時に Triton サーバープロセス内でネイティブコード実行を得られます。 | ---|--- CVE|...