Skip to main content

Triton Inference Server CVE-2025-33201

| EUVDEUVD-2025-201098 HIGH
Improper Check for Unusual or Exceptional Conditions (CWE-754)
2025-12-03 psirt@nvidia.com
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 15, 2026 - 16:14 euvd
EUVD-2025-201098
Analysis Generated
Mar 15, 2026 - 16:14 vuln.today
CVE Published
Dec 03, 2025 - 19:15 nvd
HIGH 7.5

DescriptionCVE.org

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads. A successful exploit of this vulnerability may lead to denial of service.

Analysis

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads. A successful exploit of this vulnerability may lead to denial of service.

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Improper Check for Unusual or Exceptional Conditions (CWE-754).

RemediationAI

Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

CVE-2026-24207 CRITICAL POC
9.8 May 20

Authentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct

CVE-2026-47627 CRITICAL
9.8 Aug 18

Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach

CVE-2026-24206 CRITICAL
9.8 May 20

Authentication bypass in NVIDIA Triton Inference Server allows remote unauthenticated attackers to circumvent access con

CVE-2026-24214 CRITICAL
9.8 May 20

Integer overflow in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigger

CVE-2026-24213 CRITICAL
9.8 May 20

Out-of-bounds read in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigge

CVE-2024-0087 HIGH
8.8 May 14

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitr

CVE-2024-0100 HIGH
8.1 May 14

NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system fi

CVE-2024-0088 HIGH
8.1 May 14

NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an impro

CVE-2026-24264 HIGH
7.5 Jul 01

Denial of service in NVIDIA Triton Inference Server for Linux allows remote unauthenticated attackers to exhaust server

CVE-2026-24266 HIGH
7.5 Jul 01

Denial of service in NVIDIA Triton Inference Server for Linux (versions through 26.03) allows a remote attacker to crash

CVE-2026-47629 HIGH
7.5 Aug 18

Denial of service in NVIDIA Triton Inference Server for Linux exposes AI inference infrastructure to remote disruption t

CVE-2026-47628 HIGH
7.5 Aug 18

Unbounded resource allocation in NVIDIA Triton Inference Server for Linux allows remote, unauthenticated attackers to ex

Share

CVE-2025-33201 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy