346 matches found
CVE-2026-24207
CVE-2026-24207 — NVIDIA Triton SageMaker: Omisión de autenticación hacia RCE no autenticado Los atacantes no autenticados pueden alcanzar la superficie de gestión de modelos del NVIDIA Triton Inference Server en los puertos HTTP de SageMaker y Vertex AI, omitiendo la configuración...
cve-2026-47627
CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Writeup lengkap hasil riset & PoC di repo ini image nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. Repo di-setup untuk selalu explicit agar PoC tanpa restart via gRPC. Daftar Isi 1. Ringkasan CVE 2. Lingkungan...
CVE-2026-47630
CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dlopen via TRITONBATCHSTRATEGYPATH Absolute path traversal in the custom batching-strategy loader of triton-inference-server/core. A model configuration parameter is passed unvalidated to dlopenRTLDNOW | RTLDLOCAL, so anyone able to...
GHSA-RWXX-MRJM-WC2M vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9...
CVE-2026-47629
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service...
CVE-2026-47627
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...
CVE-2026-47630
NVIDIA Triton Inference Server for Linux has an absolute path traversal vulnerability exploitable with low privileges locally, rated CVSS 5.5 (MEDIUM), potentially leading to code execution. No exploitation or patch details are provided; monitoring for updates is advised.
EUVD-2026-61111
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...
CVE-2026-47629
Improper input validation in NVIDIA Triton Inference Server for Linux allows unauthenticated remote attackers to cause denial of service (CVSS 7.5 HIGH). No exploit details or patch version are provided; monitor NVIDIA's security advisory for updates.
CVE-2026-47627
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...
EUVD-2026-61107
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...
CVE-2026-47606
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...
EUVD-2026-52799
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...
Security Bulletin: NVIDIA Triton Inference Server - August 2026
NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Server r26.03 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potentia...
CVE-2026-47481
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data...
CVE-2026-47477
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-47478
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-47482
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-47481
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data...
CVE-2026-47480
CVE-2026-47480 affects NVIDIA Triton Inference Server for Linux. The vulnerability involves an attacker-caused uncaught exception in the server, with the documented impact of a potential denial of service. Concrete technical details across connected documents indicate the affected software (Trito...