NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-73559 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

GHSA-8WR5-JM2H-8R4F vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

GHSA-33CG-GXV8-3P8G vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

CVE-2026-55574 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

CVE-2026-47487

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...

CVE-2026-47487

NVIDIA Triton Inference Server for Linux (versions 0.0–26.02) is affected by a path traversal vulnerability (CWE-22) in the Triton MLflow plugin . An authenticated local user can supply a crafted path in the model name to read, write, or modify files outside the model repository, potentially lead...

CVE-2026-47482

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47481

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data...

CVE-2026-47478

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47476

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-58760

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists where an attacker can cause the use of an expired file descriptor. This flaw is network exploitable and requires no authentication, which may...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the improper handling of highly compressed data. An...

Use After Free

Overview nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments. Affected versions of this package are vulnerable to Use After Free via the process handling memory management. An attacker can cause the application to crash or become...

CVE-2026-24264

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-24266

CVE-2026-24266 affects NVIDIA’s Triton Inference Server for Linux. The issue is a use-after-free vulnerability in the server (specific component not detailed in the provided documents) that can lead to a denial of service if exploited. NVIDIA’s security bulletin specifies affected versions are 0....

CVE-2026-53538 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, airflow-core, airflow, wazuh-manager, wazuh-manager-fips, airflow-postgres-fips, litellm...

GHSA-2FQR-MR3J-6WP8 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-12.9, apache-beam-python-3.13-sdk, mlflow, text-generation-inference, py3-vllm-cuda-13.0, open-webui, dask-kubernetes-fips, authentik, apache-beam-python-3.12-sdk, airflow-core, request-1276, metaflow-service-fips, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-24147

NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful exploit of this vulnerability may lead to information disclosure or denial of service...