by Kastro
Paper/Archive/CVE-2026-24207

CVE-2026-24207

NVIDIA Triton Inference Server — NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.0.850 × 2017.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Affected

ProductAffectedFixed inSource
Triton Inference ServerAll versions prior to r26.03–CNA

Scores by source

nvidia (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-24207refcve.org/CVERecord?id=CVE-2026-24207refnvidia.custhelp.com/app/answers/detail/a_id/5828