CVE-2026-24233
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, allowing a local, unauthenticated attacker to deserialize untrusted data. Successful exploitation could lead to code execution, privilege escalation, data tampering, and information disclosure.
Risk Assessment
The risk for the organization includes potential system compromise by a local attacker, leading to breaches of data confidentiality, integrity, and availability.
Recommendation
It is recommended to immediately update NVIDIA TensorRT-LLM to the latest patched version and restrict local access to systems running the vulnerable version.
Other vulnerabilities in NVIDIA TensorRT-LLM
See all- CVE-2026-47475Medium
A vulnerability in the NVIDIA TensorRT-LLM library has been found in the OpenAI-compatible inference API. An attacker can trigger a reachable assertion in the sampler thread, leading to denial of service.
- CVE-2026-47473High
NVIDIA TensorRT-LLM contains a vulnerability that could allow an attacker to trigger a write-what-where condition. Successful exploitation may lead to data tampering, denial of service, and information disclosure.
- CVE-2026-47472High
A vulnerability in NVIDIA TensorRT-LLM's inter-process communication layer allows an attacker with local same-user access to trigger deserialization. Successful exploitation could lead to code execution, information disclosure, data tampering, and denial of service.
- CVE-2026-47471High
A vulnerability in NVIDIA TensorRT-LLM during tensor deserialization allows an attacker to trigger a heap-based buffer overflow. This could lead to information disclosure, data tampering, or denial of service.
- CVE-2026-47470Medium
NVIDIA TensorRT-LLM contains a vulnerability in the gRPC server chat API endpoint, allowing a local attacker to trigger CWE-20 (improper input validation). Successful exploitation could lead to denial of service (DoS).
- CVE-2026-24271Medium
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service.
- CVE-2026-24259Medium
NVIDIA TensorRT-LLM for Linux contains a vulnerability that could allow an attacker to bypass authentication for a critical function. Successful exploitation may lead to code execution, data tampering, and information disclosure.
- CVE-2026-24234Medium
A vulnerability in NVIDIA TensorRT-LLM for Linux exists in the multimodal media fetching functions, allowing a network-accessible attacker to perform server-side request forgery (SSRF). Successful exploitation could lead to denial of service and information disclosure.
- CVE-2026-24229High
A vulnerability in NVIDIA TensorRT-LLM for Linux within the disaggregated orchestrator component allows an attacker to read, write, or delete internal cluster state by sending requests to the FastAPI server. Successful exploitation could lead to information disclosure, data tampering, and denial of service.
- CVE-2026-24226Medium
A vulnerability in NVIDIA TensorRT-LLM for Linux allows an attacker to cause improper control of code generation. Successful exploitation could lead to code execution, data tampering, and information disclosure.
Original NVD description (English source)
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.