What is the CVSS score of CVE-2025-33238?

CVE-2025-33238 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Nvidia are affected by CVE-2025-33238?

NVIDIA Triton Inference Server deployments using the Sagemaker HTTP component are vulnerable to unauthenticated denial-of-service attacks via a race condition.

How to fix or mitigate CVE-2025-33238?

Within 24 hours: Inventory all NVIDIA Triton Inference Server deployments in your environment and identify which use the Sagemaker HTTP server component; document current version numbers and deployment locations. Within 7 days: Implement network segmentation to restrict unauthenticated access to Triton HTTP endpoints; deploy WAF rules blocking malformed requests that trigger race conditions; establish monitoring for exception logs and service restarts. Within 30 days: Monitor NVIDIA security advisories for patch availability; evaluate alternative inference server options; conduct load testing of mitigations; develop automated remediation runbooks for future patches.

Nvidia CVE-2025-33238

EUVD-2025-208968 HIGH

Race Condition (CWE-362)

2026-03-24 nvidia

GHSA-5pqx-p8mp-cxrf

Denial Of Service Nvidia Race Condition

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 24, 2026 - 20:31 euvd

EUVD-2025-208968

Analysis Generated

Mar 24, 2026 - 20:31 vuln.today

CVE Published

Mar 24, 2026 - 20:25 nvd

HIGH 7.5

DescriptionCVE.org

NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service.

AnalysisAI

NVIDIA Triton Inference Server's Sagemaker HTTP server contains a race condition vulnerability that allows unauthenticated remote attackers to trigger an exception, resulting in denial of service. The vulnerability affects NVIDIA Triton Inference Server deployments using the Sagemaker HTTP server component and can be exploited over the network without authentication or user interaction. There is no indication of active exploitation (not in CISA KEV), and EPSS data was not provided, but the CVSS score of 7.5 (High) reflects the ease of exploitation.

Technical ContextAI

NVIDIA Triton Inference Server is an open-source inference serving software that enables deployment of AI models at scale. The vulnerable component is the Sagemaker HTTP server, which provides an HTTP interface compatible with AWS SageMaker for model inference requests. The root cause is CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization, also known as a Race Condition), indicating that multiple threads or processes access shared resources without proper locking mechanisms, leading to undefined behavior and exceptions. The affected product CPE is cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:* with the wildcard version indicating multiple versions are vulnerable pending specific version guidance from NVIDIA's advisory.

RemediationAI

Consult NVIDIA's security bulletin at https://nvidia.custhelp.com/app/answers/detail/a_id/5790 for specific patch versions and upgrade instructions to remediate this race condition in the Sagemaker HTTP server component. Organizations should prioritize upgrading internet-facing Triton Inference Server instances to the patched version as soon as possible. As interim mitigation until patching is complete, restrict network access to the Sagemaker HTTP server endpoint using firewall rules or network segmentation to allow only trusted IP ranges, implement rate limiting to reduce the window for race condition exploitation, and monitor server logs for unusual exception patterns or service crashes that may indicate exploitation attempts.