599 matches found
CVE-2026-24207
CVE-2026-24207 — NVIDIA Triton SageMaker Auth Bypass to Unauth RCE Unauthenticated attackers can reach the model-management surface of NVIDIA Triton Inference Server on the SageMaker and Vertex AI HTTP ports — bypassing the operator's --http-restricted-api configuration. Combined with the SageMak...
CVE-2023-43654
CVE-2023-43654 ShellTorch is a chain of 3 Critical Vulnerabilities in PyTorch TorchServe - the default inference server of PyTorch. This is an End-to-End POC for an SSRF vulnerability which leads to Arbitrary Remote Code Execution from the network 1. Run TorchServe 0.8.1 docker run -d --rm -it -p...
CVE-2026-47630
CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dlopen via TRITONBATCHSTRATEGYPATH Absolute path traversal in the custom batching-strategy loader of triton-inference-server/core. A model configuration parameter is passed unvalidated to dlopenRTLDNOW | RTLDLOCAL, so anyone able to...
cve-2026-47627
CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Complete research writeup & PoC in this repo image nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. Repo is set up to always be explicit so PoC works without restart via gRPC. Table of Contents 1. CVE Summary 2...
NVIDIA Triton Inference Server Auth Bypass (CVE-2026-24207)
Exploits CVE-2026-24207 in NVIDIA Triton Inference Server = 26.02: unauthenticated access to restricted HTTP APIs including /models and model management endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """NVIDIA Triton Inference Server auth bypass CVE-2026-24207.""" import json from kittysplo...
CVE-2026-101918 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, lmcache-cuda-12.8, lmcache-cuda-13.0, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, openstack-manila-2025.2, openstack-glance-2026.1, airflow, openstack-heat-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.2...
GHSA-42VR-XJ54-VC7V vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, lmcache-cuda-12.8, lmcache-cuda-13.0, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, openstack-manila-2025.2, openstack-glance-2026.1, airflow, openstack-heat-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.2...
GHSA-HJ66-6F7G-4R5V vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, jupyterhub-k8s-singleuser-sample, kserve-pmmlserver-fips, litellm, kubeflow-volumes-web-app, airflow, openstack-keystone-2025.2, mlrun-fips, awx, kubeflow-pipelines, azureml-inference-server-http, kserve-lgbserver,...
GHSA-XPV3-W29H-X7CV vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, jupyterhub-k8s-singleuser-sample, kserve-pmmlserver-fips, litellm, kubeflow-volumes-web-app, airflow, openstack-keystone-2025.2, mlrun-fips, awx, kubeflow-pipelines, azureml-inference-server-http, kserve-lgbserver,...
CVE-2026-49265 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, jupyterhub-k8s-singleuser-sample, kserve-pmmlserver-fips, litellm, kubeflow-volumes-web-app, airflow, openstack-keystone-2025.2, mlrun-fips, awx, kubeflow-pipelines, azureml-inference-server-http, kserve-lgbserver,...
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, jupyterhub-k8s-singleuser-sample, kserve-pmmlserver-fips, litellm, kubeflow-volumes-web-app, airflow, openstack-keystone-2025.2, mlrun-fips, awx, kubeflow-pipelines, azureml-inference-server-http, kserve-lgbserver,...
GHSA-HXM8-2XGR-2P9M vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, airflow, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips,...
GHSA-R6X4-923Q-G947 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips, azureml-inference-server-http,...
GHSA-W2CX-738M-MC7W vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips, azureml-inference-server-http,...
GHSA-W6J9-CWV2-H6WQ vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, airflow, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips,...
CVE-2026-102271 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, airflow, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips,...
GHSA-P4G4-X82P-Q773 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, airflow, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips,...
GHSA-2GX3-RCP4-G85Q vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, airflow, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips,...
CVE-2026-102274 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-placement-2026.1-fips, openstack-horizon-2025.1-fips, litellm, openstack-manila-2025.2, openstack-heat-2026.1, airflow, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-glance-2025.2-fips,...
