CVEFinder.io

CVE-2026-47487

🔶 medium
Summary

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

CVSS Score
4.4
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-08-04
First Seen: 2026-08-05
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 11.4% of all 365,968 vulnerabilities in our database.

#324,375
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 4, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-08-17
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CWE IDs (Weakness Types)

📦 Affected Products 1

🔗 References 3

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-47606 🔶 medium 6.5 0.5 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path travers... 2026-08-18
CVE-2026-47627 ⛔ critical 9.8 0.5 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A succes... 2026-08-18
CVE-2026-47628 ⚠️ high 7.5 0.4 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resourc... 2026-08-18
CVE-2026-47629 ⚠️ high 7.5 0.4 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validatio... 2026-08-18
CVE-2026-47630 🔶 medium 5.5 0.2 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path travers... 2026-08-18
CVE-2026-47476 ⚠️ high 7.5 0.5 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource cons... 2026-07-14
These CVEs affect the same products