455 matches found
cve-2026-47627
CVE-2026-47627 — NVIDIA Triton Inference Server パストラバーサル → DoS（Zip-Slip） このリポジトリにおける調査結果とPoCの完全なWriteup（イメージnvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0）。リポジトリは常に explicit に設定されており、gRPC経由で再起動なしのPoCが可能です。 目次 1. CVE概要 2. ラボ環境 3. 脆弱性の構造 4. 根本原因分析（26.05 → 26.06 の差分） 5. 攻撃経路：実際に影響を受けるのはどれか？ ...
CVE-2026-24207
CVE-2026-24207 — NVIDIA Triton SageMaker Auth Bypass to Unauth RCE Unauthenticated attackers can reach the model-management surface of NVIDIA Triton Inference Server on the SageMaker and Vertex AI HTTP ports — bypassing the operator's --http-restricted-api configuration. Combined with the SageMak...
CVE-2026-47630
CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dlopen via TRITONBATCHSTRATEGYPATH Absolute path traversal in the custom batching-strategy loader of triton-inference-server/core. A model configuration parameter is passed unvalidated to dlopenRTLDNOW | RTLDLOCAL, so anyone able to...
CVE-2026-47625
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
CVE-2026-16497
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-47625
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
EUVD-2026-72938
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
CVE-2026-47625
NVIDIA Triton Inference Server for Linux contains a missing authorization flaw (CWE-862) that can be exploited over the network without authentication. A successful attack may result in information disclosure, data tampering, and denial of service , with a CVSS v3.1 score of 7.5 (High) driven pri...
CVE-2026-16497
NVIDIA Triton Inference Server for Linux is affected by an excessive iteration flaw (CWE-834) that allows a network-based, unauthenticated attacker to cause denial of service . The vulnerability affects versions 0.0 through 26.06 . NVIDIA rates it CVSS 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/U...
EUVD-2026-72937
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-16497
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-16497
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-16497: Excessive Iteration
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...
PT-2026-87142
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
Security Bulletin: Triton Inference Server - September 2026
NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Inference Server r26.07 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software...
PT-2026-87139
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-47625: Missing Authorization
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
GHSA-RWXX-MRJM-WC2M vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
