Triton

Triton 是一个动态二进制分析库。它提供了内部组件，允许您构建程序分析工具， 自动化逆向工程、进行软件验证或仅仅是模拟代码。 动态 符号 执行 动态 污点 分析 x86 、x86-64 、ARM32 、AArch64 和 RISC-V 32/64 ISA 语义的 AST 表示 表达式 合成 SMT 简化 过程 将代码提升 到 LLVM 以及 Z3 并反向 SMT求解器 接口支持 Z3 和 Bitwuzla C++ 和 Python API 由于 Triton 是一个兼职性质的项目，如果不完全可靠，请不要责怪我们 。提出问题 或 提交拉取请求 总是比嘲讽更好...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton SageMaker Auth Bypass to Unauth RCE Unauthenticated attackers can reach the model-management surface of NVIDIA Triton Inference Server on the SageMaker and Vertex AI HTTP ports — bypassing the operator's --http-restricted-api configuration. Combined with the SageMak...

exrop

Exrop Generador automático de cadenas ROP para binarios x86-64, impulsado por la ejecución simbólica de Triton. Características Establecer registros a constantes u otros registros rdi=0x41414141, rdi=rax Escribir en memoria direcciones/valores basados en constantes y registros Escribir...

exrop

Exrop Automatic ROP chain generator for x86-64 binaries, powered by Triton symbolic execution. Features Set registers to constants or other registers rdi=0x41414141, rdi=rax Write to memory constant and register-based addresses/values Write strings/bytes to memory Function calls with mixed...

CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: dlopen arbitrario mediante TRITONBATCHSTRATEGYPATH Recorrido de ruta absoluta en el cargador personalizado de estrategias de batching de triton-inference-server/core. Un parámetro de configuración del modelo se pasa sin validar a dlopenRTLDNOW |...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Writeup completo de la investigación y PoC en este repo imagennvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. El repo está configurado para estar siempre en modo explicit para que el PoC funcione sin reinicio ví...

triton-cve-2025-23320

Demostración de CVE-2025-23320 Este repositorio replica CVE-2025-23320, demostrando CWE-209, Generación de mensajes de error que contienen información sensible Puntuación CVSS: 7.5. Esta vulnerabilidad existe en todos los servidores de inferencia NVIDIA Triton 25.06 y anteriores. Esta configuraci...

CVE-2026-93841

A flaw was found in vLLM. This memory corruption vulnerability exists in the Triton bincountkernel, where prompt token identifiers IDs are used to index a bitset without proper bounds checking against the vocabulary size. A remote attacker can exploit this by submitting multimodal audio requests...

Out-of-bounds Write

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Out-of-bounds Write via the Triton bincountkernel, where prompt token IDs index the penalty prompt-presence bitset without bounds checking against t...

CVE-2026-93841

vLLM through 0.29.0 has a memory corruption vulnerability in the Triton _bincount_kernel used by the GPU sampler. Prompt token IDs index the penalty prompt-presence bitset without bounds checking against the vocabulary size. An unauthenticated attacker can submit multimodal audio requests contain...

CVE-2026-93841: Improper Validation of Array Index

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton bincountkernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocabulary size, causing...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a missing authorization flaw (CWE-862) that can be exploited over the network without authentication. A successful attack may result in information disclosure, data tampering, and denial of service , with a CVSS v3.1 score of 7.5 (High) driven pri...

EUVD-2026-72938

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux is affected by an excessive iteration flaw (CWE-834) that allows a network-based, unauthenticated attacker to cause denial of service . The vulnerability affects versions 0.0 through 26.06 . NVIDIA rates it CVSS 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/U...

EUVD-2026-72937

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...