CVE-2025-33255
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
NVIDIA TRT-LLM for any platform contains a vulnerability in the MPI server that could allow an attacker to cause unsafe deserialization. A successful exploit might lead to code execution, denial of service, data tampering, and information disclosure.
Risk Assessment
The organization is at risk of remote code execution, service disruptions, and leakage or manipulation of data processed by language models.
Recommendation
Immediately contact NVIDIA for security patches and apply them in the production environment. Restrict access to the MPI server to trusted networks only.
Other vulnerabilities in NVIDIA TRT-LLM
See all- CVE-2026-24163High
NVIDIA TRT-LLM contains a vulnerability in RPC testing that allows unsafe deserialization, potentially leading to code execution, denial of service, data tampering, and information disclosure.
- CVE-2026-24160Medium
NVIDIA TRT-LLM contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. Successful exploitation might lead to denial of service.
- CVE-2026-24142Medium
Deserialization vulnerability and unsafe serialized handle in NVIDIA TRT-LLM. Can lead to code execution, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.