CVE-2026-47477: Stack-based Buffer Overflow

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47480: Uncaught Exception

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-58758

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47482: Missing Release of Memory after Effective Lifetime

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47481: Authentication Bypass Using an Alternate Path or Channel

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data...

CVE-2026-47476: Uncontrolled Resource Consumption

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-24272: Heap-based Buffer Overflow

NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-62239

FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the downloadandcopy function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A local attacker can pre-plant a symlink in the...

nlm-ingestor (>=0.1.1, <=0.1.5), nvidia-modulus-sym (>=1.0.0, <=1.7.0) +1 more potentially affected by CVE-2026-49851 via mistune (2.0.3)

mistune PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - nlm-ingestor =0.1.1, =1.0.0, =1.7.0 - stattic 1.0.0 Source cves: CVE-2026-49851 Source advisory: OSV:PYSEC-2026-2652...

aiqtoolkit-agno (>=1.1.0a20250429, <=1.3.1), nvidia-nat-agno (>=1.1.0a20251020, <=1.5.0a20260122) potentially affected by CVE-2026-10105 via agno (1.2.16)

agno PYPI version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on agno and may be impacted: - aiqtoolkit-agno =1.1.0a20250429, =1.1.0a20251020, =1.5.0a20260122 Source cves: CVE-2026-10105 Source advisory: OSV:PYSEC-2026-2333...

ng-model-gym (>=0.3.0, <=0.4.0), nvidia-vipe (>=0.1.1, <=1.2.0) +1 more potentially affected by CVE-2026-34543 via openexr (>=3.2.4, <=3.4.4)

openexr PYPI version =3.2.4, =0.3.0, =0.1.1, =1.2.0 - sfx 0.1.0 Source cves: CVE-2026-34543 Source advisory: OSV:PYSEC-2026-2850...

ng-model-gym (>=0.3.0, <=0.4.0), nvidia-vipe (>=0.1.1, <=1.2.0) +1 more potentially affected by CVE-2026-34544 via openexr (>=3.2.4, <=3.4.4)

openexr PYPI version =3.2.4, =0.3.0, =0.1.1, =1.2.0 - sfx 0.1.0 Source cves: CVE-2026-34544 Source advisory: OSV:PYSEC-2026-2847...

PYSEC-2026-2674 NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

PYSEC-2026-2675 NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

llama-index-packs-vanna (>=0.1.5, <=0.3.0), nvidia-nat-vanna (>=1.4.0a20260123, <=1.7.0a20260513) +1 more potentially affected by CVE-2026-4229 via vanna (2.0.2)

vanna PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vanna and may be impacted: - llama-index-packs-vanna =0.1.5, =1.4.0a20260123, =1.0.0, =2.0.0 Source cves: CVE-2026-4229 Source advisory: OSV:PYSEC-2026-3397...

aiqtoolkit (>=1.1.0a20251020, <=1.5.0a20260122), aiqtoolkit-agno (>=1.3.0, <=1.3.1) +41 more potentially affected by CVE-2025-45691 via ragas (>=0.2.6, <=0.2.15)

ragas PYPI version =0.2.6, =1.1.0a20251020, =1.3.0, =1.1.0a20250506, =1.3.0, =1.1.0a20251020, =1.3.0, =1.3.0, =2.8.1, =1.0.0, =1.1.0a20251020, =1.4.0a20251206, =1.1.0a20251020, =1.1.0a20251020, =1.4.0a20260106, =1.5.0a20260211, =1.5.0a20260218 and more Source cves: CVE-2025-45691 Source advisory:...

PYSEC-2026-2672 NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

PYSEC-2026-2673 NVIDIA NeMo Framework Deserializes Untrusted Data

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...