CVE-2026-24163
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
NVIDIA TRT-LLM contains a vulnerability in RPC testing that allows unsafe deserialization, potentially leading to code execution, denial of service, data tampering, and information disclosure.
Risk Assessment
An attacker can remotely execute code on the server, disrupt service, modify data, or access sensitive information, posing a serious security threat.
Recommendation
Apply patches provided by NVIDIA for TRT-LLM.
Other vulnerabilities in NVIDIA TRT-LLM
See all- CVE-2026-24160Medium
NVIDIA TRT-LLM contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. Successful exploitation might lead to denial of service.
- CVE-2026-24142Medium
Deserialization vulnerability and unsafe serialized handle in NVIDIA TRT-LLM. Can lead to code execution, data tampering, and information disclosure.
- CVE-2025-33255High
NVIDIA TRT-LLM for any platform contains a vulnerability in the MPI server that could allow an attacker to cause unsafe deserialization. A successful exploit might lead to code execution, denial of service, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.