CriticalVulnerability
CVE-2026-24207: NVIDIA Triton Inference Server authentication bypass
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-24207
- Published
- Record updated
- Fixed in
- The source references a patch, a mitigation or a vendor advisory.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 2.6%
Summary
NVIDIA Triton Inference Server contains an authentication bypass flaw, tracked as CVE-2026-24207 and classified as CWE-288 (Authentication Bypass Using an Alternate Path or Channel). A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure. The NVD has not yet provided its own assessment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- HighCVE-2026-65142: NVIDIA Model-Optimizer untrusted data deserializationSame vendor · NVD/CVE Database
- HighGHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputsSame vendor · GitHub Advisory Database
- HighCVE-2026-47625: NVIDIA Triton Inference Server for Linux missing authorization flawSame vendor · NVD/CVE Database
- HighCVE-2026-16497: NVIDIA Triton Inference Server for Linux excessive iteration denial of serviceSame vendor · NVD/CVE Database
- MediumCVE-2026-47630: NVIDIA Triton Inference Server for Linux absolute path traversalSame vendor · NVD/CVE Database