HighVulnerability
CVE-2026-24209: NVIDIA Triton Inference Server path traversal leading to denial of service
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-24209
- Published
- Record updated
- Fixed in
- The source references a patch, a mitigation or a vendor advisory.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
NVIDIA Triton Inference Server contains a path traversal vulnerability, classified as CWE-22, that an attacker could trigger. The source states that a successful exploit might lead to denial of service. NVD has not yet provided an assessment, and the record was published on 05/20/2026.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- HighCVE-2026-65142: NVIDIA Model-Optimizer untrusted data deserializationSame vendor · NVD/CVE Database
- HighGHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputsSame vendor · GitHub Advisory Database
- HighCVE-2026-47625: NVIDIA Triton Inference Server for Linux missing authorization flawSame vendor · NVD/CVE Database
- HighCVE-2026-16497: NVIDIA Triton Inference Server for Linux excessive iteration denial of serviceSame vendor · NVD/CVE Database
- MediumCVE-2026-47630: NVIDIA Triton Inference Server for Linux absolute path traversalSame vendor · NVD/CVE Database