CVE-2026-47481
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to bypass authentication through an alternative path or channel. A successful exploit could lead to code execution, privilege escalation, information disclosure, and data tampering.
Risk Assessment
The risk for the organization includes potential compromise of the inference server, leading to breaches of data confidentiality and integrity, as well as disruption of AI services.
Recommendation
It is recommended to immediately update NVIDIA Triton Inference Server to the latest patched version and implement additional authentication and access monitoring mechanisms.
Other vulnerabilities in NVIDIA Triton Inference Server
See all- CVE-2026-47627Critical
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to perform path traversal, potentially leading to denial of service.
- CVE-2026-24207Critical
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
- CVE-2026-47630Medium
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause an absolute path traversal. A successful exploit might lead to code execution.
- CVE-2026-47629High
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.
- CVE-2026-47628High
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause unlimited resource allocation. Successful exploitation may lead to denial of service.
- CVE-2026-47606Medium
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.
- CVE-2026-47487Medium
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit might lead to denial of service and information disclosure.
- CVE-2026-47482High
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.
- CVE-2026-47480High
NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to trigger an uncaught exception. Successful exploitation of this vulnerability could lead to denial of service.
- CVE-2026-47479High
A vulnerability in NVIDIA Triton Inference Server for Linux allows an attacker to cause uncontrolled resource consumption. Successful exploitation could lead to denial of service (DoS).
Original NVD description (English source)
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.