CVE-2026-24206

⚠️ high

Summary

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.

CVSS Score

7.3

High

EPSS Score

0.6

Exploit Probability

Published Date

2026-05-20

First Seen: 2026-05-21

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 54.3% of all 365,968 vulnerabilities in our database.

#167,192

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: May 20, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

SSVC data provided by CISA

Last Modified 2026-07-24

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE IDs (Weakness Types)

CWE-288

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
nvidia	triton_inference_server	Affected	< 26.03

🔗 References 3

https://nvd.nist.gov/vuln/detail/CVE-2026-24206

Third Party Advisory US Government Resource

https://nvidia.custhelp.com/app/answers/detail/a_id/...

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2026-24206

Third Party Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-47606	🔶 medium	6.5	0.5	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path travers...	2026-08-18
CVE-2026-47627	⛔ critical	9.8	0.5	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A succes...	2026-08-18
CVE-2026-47628	⚠️ high	7.5	0.4	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resourc...	2026-08-18
CVE-2026-47629	⚠️ high	7.5	0.4	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validatio...	2026-08-18
CVE-2026-47630	🔶 medium	5.5	0.2	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path travers...	2026-08-18
CVE-2026-47487	🔶 medium	4.4	0.2	NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repos...	2026-08-04

These CVEs affect the same products