What is the CVSS score of CVE-2026-24215?

CVE-2026-24215 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Triton Inference Server CVE-2026-24215

EUVD-2026-31053 HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-05-20 nvidia

GHSA-f637-j435-xwhv

Denial Of Service Triton Inference Server Nvidia

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Re-analysis Queued

Jul 24, 2026 - 10:22 vuln.today

cvss_changed

Severity Changed

Jul 24, 2026 - 10:22 NVD

MEDIUM HIGH

CVSS changed

Jul 24, 2026 - 10:22 NVD

5.7 (MEDIUM) 7.5 (HIGH)

Analysis Generated

May 20, 2026 - 04:05 vuln.today

DescriptionNVD

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

AnalysisAI

Uncontrolled resource consumption in NVIDIA Triton Inference Server's DALI backend allows a network-adjacent, low-privileged attacker to exhaust server resources, resulting in denial of service. The vulnerability (CWE-400) is triggered through the DALI data-loading and augmentation backend, requires low privileges and user interaction, and carries a CVSS score of 5.7 (Medium). No public exploit code or CISA KEV listing has been identified at time of analysis, placing this in a monitored-but-not-critical-urgency tier for most deployments.

Technical ContextAI

NVIDIA Triton Inference Server is an open-source inference serving platform supporting multiple ML frameworks. The DALI (Data Loading Library) backend is an NVIDIA-developed accelerated data-loading and preprocessing pipeline used within Triton to handle input data for inference requests. CWE-400 (Uncontrolled Resource Consumption) indicates the root cause is a failure to impose appropriate limits on resource usage - such as CPU cycles, memory, threads, or file handles - when processing attacker-controlled input through the DALI pipeline. The affected scope per CPE (cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*) covers all versions of the server application without a defined upper or lower version bound in the available data.

RemediationAI

Patch available per vendor advisory - consult the NVIDIA support article at https://nvidia.custhelp.com/app/answers/detail/a_id/5828 for the specific patched release version, as no exact fix version was included in the available input data. In the interim, if the DALI backend is not required for current inference workloads, disabling or restricting access to DALI-backed model endpoints reduces the attack surface without impacting non-DALI model serving. Access controls should be reviewed to ensure that only trusted, explicitly authorized users hold credentials to submit inference requests against the affected server. Rate-limiting and resource quotas at the infrastructure layer (e.g., Kubernetes resource limits, reverse proxy request throttling) can serve as compensating controls to bound the impact of a resource exhaustion attempt, though these do not eliminate the underlying vulnerability. Network segmentation to prevent untrusted or low-trust users from reaching Triton's API port is recommended as an additional defense layer.