HighVulnerability
CVE-2025-33238: NVIDIA Triton Inference Server Sagemaker HTTP server denial of service
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-33238
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
NVIDIA Triton Inference Server's Sagemaker HTTP server contains a vulnerability, tracked as CVE-2025-33238, that lets an attacker cause an exception. A successful exploit may lead to denial of service. The weakness is classified as CWE-362, a race condition from concurrent execution using a shared resource with improper synchronization. NVD has not yet provided an assessment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- HighCVE-2026-65142: NVIDIA Model-Optimizer untrusted data deserializationSame vendor · NVD/CVE Database
- HighGHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputsSame vendor · GitHub Advisory Database
- HighCVE-2026-47625: NVIDIA Triton Inference Server for Linux missing authorization flawSame vendor · NVD/CVE Database
- HighCVE-2026-16497: NVIDIA Triton Inference Server for Linux excessive iteration denial of serviceSame vendor · NVD/CVE Database
- MediumCVE-2026-47630: NVIDIA Triton Inference Server for Linux absolute path traversalSame vendor · NVD/CVE Database