EUVD-2026-31049
GHSA-8pxv-chrc-9c6j
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionNVD
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.
AnalysisAI
Authentication bypass in NVIDIA Triton Inference Server allows remote unauthenticated attackers to circumvent access controls, potentially leading to privilege escalation, denial of service, or information disclosure. With a CVSS 7.3 score and network-reachable attack vector (AV:N/AC:L/PR:N/UI:N), the flaw is exploitable without user interaction or credentials, though no public exploit identified at time of analysis. The vulnerability is not currently listed in CISA KEV, and EPSS data was not provided in the source intelligence.
Technical ContextAI
NVIDIA Triton Inference Server is an open-source serving framework used to deploy AI/ML models at scale across GPU and CPU infrastructure, supporting frameworks such as TensorFlow, PyTorch, ONNX, and TensorRT. It exposes HTTP/REST and gRPC endpoints for inference, model management, and metrics, frequently deployed in MLOps pipelines and production AI serving stacks. The root cause is CWE-288 (Authentication Bypass Using an Alternate Path or Channel), meaning an attacker can reach protected functionality through a route that fails to enforce the intended authentication check, bypassing the access control layer entirely rather than defeating credentials.
RemediationAI
Consult the NVIDIA security bulletin at https://nvidia.custhelp.com/app/answers/detail/a_id/5828 to identify the fixed Triton Inference Server release and upgrade to that version - exact fixed version is not stated in the provided intelligence, so do not assume a specific tag. As compensating controls until patched, place Triton behind an authenticating reverse proxy (e.g., an ingress enforcing mTLS or OAuth) so the bypassable path is unreachable directly, restrict the HTTP (default 8000), gRPC (8001), and metrics (8002) ports to allow-listed client subnets via host or cloud firewall, and disable the model-control and repository management endpoints by running with --model-control-mode=none if the deployment does not require dynamic model loading (trade-off: prevents hot-loading new models without a restart). For multi-tenant or shared environments, isolate each Triton instance per tenant rather than relying on application-layer auth.
More in Triton Inference Server
View allAuthentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach
Integer overflow in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigger
Out-of-bounds read in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigge
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitr
NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system fi
NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an impro
Denial of service in NVIDIA Triton Inference Server for Linux allows remote unauthenticated attackers to exhaust server
Denial of service in NVIDIA Triton Inference Server for Linux (versions through 26.03) allows a remote attacker to crash
Denial of service in NVIDIA Triton Inference Server for Linux exposes AI inference infrastructure to remote disruption t
Unbounded resource allocation in NVIDIA Triton Inference Server for Linux allows remote, unauthenticated attackers to ex
Denial of service in NVIDIA Triton Inference Server for Linux allows remote unauthenticated attackers to trigger uncontr
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today