PT-2026-58757

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47478: Use of Expired File Descriptor

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47476: Uncontrolled Resource Consumption

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-58750

Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold. This issue may allow an attacker to execute arbitrary code. Recommendation...

CVE-2026-47480: Uncaught Exception

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47482: Missing Release of Memory after Effective Lifetime

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-58758

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-58762

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists where an attacker can trigger an uncaught exception. This flaw is network exploitable and requires no authentication, which may lead to a deni...

CVE-2026-24233: Deserialization of Untrusted Data

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2026-24227: Deserialization of Untrusted Data

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-47473: Write-what-where Condition

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-62239

FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the downloadandcopy function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A local attacker can pre-plant a symlink in the...

nlm-ingestor (>=0.1.1, <=0.1.5), nvidia-modulus-sym (>=1.0.0, <=1.7.0) +1 more potentially affected by CVE-2026-49851 via mistune (2.0.3)

mistune PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - nlm-ingestor =0.1.1, =1.0.0, =1.7.0 - stattic 1.0.0 Source cves: CVE-2026-49851 Source advisory: OSV:PYSEC-2026-2652...

aiqtoolkit-agno (>=1.1.0a20250429, <=1.3.1), nvidia-nat-agno (>=1.1.0a20251020, <=1.5.0a20260122) potentially affected by CVE-2026-10105 via agno (1.2.16)

agno PYPI version 1.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on agno and may be impacted: - aiqtoolkit-agno =1.1.0a20250429, =1.1.0a20251020, =1.5.0a20260122 Source cves: CVE-2026-10105 Source advisory: OSV:PYSEC-2026-2333...

ng-model-gym (>=0.3.0, <=0.4.0), nvidia-vipe (>=0.1.1, <=1.2.0) +1 more potentially affected by CVE-2026-34544 via openexr (>=3.2.4, <=3.4.4)

openexr PYPI version =3.2.4, =0.3.0, =0.1.1, =1.2.0 - sfx 0.1.0 Source cves: CVE-2026-34544 Source advisory: OSV:PYSEC-2026-2847...

ng-model-gym (>=0.3.0, <=0.4.0), nvidia-vipe (>=0.1.1, <=1.2.0) +1 more potentially affected by CVE-2026-34543 via openexr (>=3.2.4, <=3.4.4)

openexr PYPI version =3.2.4, =0.3.0, =0.1.1, =1.2.0 - sfx 0.1.0 Source cves: CVE-2026-34543 Source advisory: OSV:PYSEC-2026-2850...

PYSEC-2026-2674 NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

PYSEC-2026-2675 NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...