CVE-2026-24207

Published May 20, 2026

Last updated a month ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-24207 is an authentication bypass vulnerability found in the NVIDIA Triton Inference Server. This flaw allows an attacker to circumvent security mechanisms, potentially leading to unauthorized access to affected systems. Successful exploitation of this vulnerability could result in various outcomes, including code execution, escalation of privileges, data tampering, denial of service, or information disclosure. The vulnerability can be exploited remotely over a network without requiring authentication or user interaction.

Description: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
Source: psirt@nvidia.com
NVD status: Analyzed
Products: triton_inference_server

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@nvidia.com: CWE-288

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 13

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "D5CC0AB5-9C28-4746-A0A0-D44CC1D43DF6",
            "versionEndExcluding": "26.03",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.