HighVulnerability
CVE-2026-24206: NVIDIA Triton Inference Server authentication bypass via alternate path
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-24206
- Published
- Record updated
- Fixed in
- The source references a patch, a mitigation or a vendor advisory.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.6%
Summary
NVIDIA Triton Inference Server contains an authentication bypass vulnerability, tracked as CVE-2026-24206 and classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The source states that a successful exploit might lead to privilege escalation, denial of service, or information disclosure. NVD had not yet provided an assessment at the time of publication.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- HighCVE-2026-65142: NVIDIA Model-Optimizer untrusted data deserializationSame vendor · NVD/CVE Database
- HighGHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputsSame vendor · GitHub Advisory Database
- HighCVE-2026-47625: NVIDIA Triton Inference Server for Linux missing authorization flawSame vendor · NVD/CVE Database
- HighCVE-2026-16497: NVIDIA Triton Inference Server for Linux excessive iteration denial of serviceSame vendor · NVD/CVE Database
- MediumCVE-2026-47630: NVIDIA Triton Inference Server for Linux absolute path traversalSame vendor · NVD/CVE Database