cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server パストラバーサル → DoS（Zip-Slip） このリポジトリにおける調査結果とPoCの完全なWriteup（イメージnvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0）。リポジトリは常に explicit に設定されており、gRPC経由で再起動なしのPoCが可能です。 目次 1. CVE概要 2. ラボ環境 3. 脆弱性の構造 4. 根本原因分析（26.05 → 26.06 の差分） 5. 攻撃経路：実際に影響を受けるのはどれか？ ...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton SageMaker 認証バイパスによる未認証RCE 認証されていない攻撃者は、NVIDIA Triton Inference ServerのSageMakerおよびVertex AI HTTPポート上の モデル管理サーフェスに到達できます — オペレーターの--http-restricted-api設定をバイパスします。 SageMaker MME LOADプリミティブとPythonバックエンドモデルを組み合わせることで、 攻撃者がTritonが読み取り可能なファイルシステムパスにモデルファイルを配置できる場合、...

CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: TRITONBATCHSTRATEGYPATH を介した任意の dlopen triton-inference-server/core のカスタムバッチ戦略ローダーにおける絶対パストラバーサル。モデル設定パラメータが検証されずに dlopenRTLDNOW | RTLDLOCAL に渡されるため、モデルの config.pbtxt に影響を与えられる者は誰でも、モデルロード時に Triton サーバープロセス内でネイティブコード実行を得られます。...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-47625

NVIDIA Triton Inference Server for Linux contains a missing authorization flaw (CWE-862) that can be exploited over the network without authentication. A successful attack may result in information disclosure, data tampering, and denial of service , with a CVSS v3.1 score of 7.5 (High) driven pri...

EUVD-2026-72938

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

EUVD-2026-72937

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux is affected by an excessive iteration flaw (CWE-834) that allows a network-based, unauthenticated attacker to cause denial of service . The vulnerability affects versions 0.0 through 26.06 . NVIDIA rates it CVSS 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/U...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-16497

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-16497: Excessive Iteration

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

Security Bulletin: Triton Inference Server - September 2026

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Inference Server r26.07 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software...

PT-2026-87142

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

CVE-2026-47625: Missing Authorization

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

PT-2026-87139

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service...

GHSA-RWXX-MRJM-WC2M vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9...

Exploit for CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dl...

CVE-2026-47629

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service...