by Kastro
Paper/Archive/CVE-2025-23317

CVE-2025-23317

NVIDIA Triton Inference Server — NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a sp…

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.9.829 × 2016.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

Affected

ProductAffectedFixed inSource
Triton Inference ServerAll versions prior to 25.07–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvidia (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refnvd.nist.gov/vuln/detail/CVE-2025-23317refcve.org/CVERecord?id=CVE-2025-23317refnvidia.custhelp.com/app/answers/detail/a_id/5687