CVE-2026-24207 – Triton Inference Server
“AI inference servers become critical risk points when access controls and memory safety break down.”
NVIDIA released patches for six vulnerabilities affecting Triton Inference Server. CVE-2026-24207 has a CVSS score of 9.8, which is Critical severity. CVE-2026-24213 has a CVSS score of 8.0, which is High severity. CVE-2026-24214 has a CVSS score of 8.0, which is High severity. CVE-2026-24206 has a CVSS score of 7.3, which is High severity. CVE-2026-24209 has a CVSS score of 7.5, which is High severity. CVE-2026-24210 has a CVSS score of 7.5, which is High severity.
The update addresses authentication bypass, path traversal, out-of-bounds read, and integer overflow issues. Several vulnerabilities could allow remote code execution or privilege escalation in affected AI inference environments.
Key Details
- Affected Product
- Nvidia Triton Inference Server
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-288