CVE-2026-24142
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Deserialization vulnerability and unsafe serialized handle in NVIDIA TRT-LLM. Can lead to code execution, data tampering, and information disclosure.
Risk Assessment
Risk of full system compromise, data integrity violation, and leakage of sensitive information.
Recommendation
Apply the update from NVIDIA for TRT-LLM. Restrict access to models and data to trusted users only.
Other vulnerabilities in NVIDIA TRT-LLM
See all- CVE-2026-24163High
NVIDIA TRT-LLM contains a vulnerability in RPC testing that allows unsafe deserialization, potentially leading to code execution, denial of service, data tampering, and information disclosure.
- CVE-2026-24160Medium
NVIDIA TRT-LLM contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. Successful exploitation might lead to denial of service.
- CVE-2025-33255High
NVIDIA TRT-LLM for any platform contains a vulnerability in the MPI server that could allow an attacker to cause unsafe deserialization. A successful exploit might lead to code execution, denial of service, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS