CVE-2026-24208
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
NVIDIA Triton Inference Server contains a path traversal vulnerability. An attacker can exploit this flaw, leading to denial of service (DoS).
Risk Assessment
A successful attack may render the inference server unavailable, disrupting applications that rely on AI models.
Recommendation
Apply the available patch from NVIDIA or update Triton Inference Server to a fixed version.
Other vulnerabilities in NVIDIA Triton Inference Server
See all- CVE-2026-47627Critical
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to perform path traversal, potentially leading to denial of service.
- CVE-2026-24207Critical
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
- CVE-2026-47625High
NVIDIA Triton Inference Server for Linux has a missing authorization vulnerability that an attacker could exploit. Successful exploitation may lead to information disclosure, data tampering, and denial of service.
- CVE-2026-16497High
NVIDIA Triton Inference Server for Linux contains a vulnerability that could allow an attacker to cause excessive iteration. Successful exploitation might lead to denial of service.
- CVE-2026-47630Medium
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause an absolute path traversal. A successful exploit might lead to code execution.
- CVE-2026-47629High
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.
- CVE-2026-47628High
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause unlimited resource allocation. Successful exploitation may lead to denial of service.
- CVE-2026-47606Medium
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.
- CVE-2026-47487Medium
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit might lead to denial of service and information disclosure.
- CVE-2026-47482High
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.
Original NVD description (English source)
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS