EUVD-2026-44432
GHSA-q7h6-x952-46fm
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A10:2025 - Mishandling of Exceptional Conditions
ASVS 5.0
V16 - Security Logging and Error Handling Exception handling completeness
|
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 14, 2026
Denial of service in NVIDIA Triton Inference Server on Linux allows remote unauthenticated attackers to crash the service by triggering an uncaught exception (CWE-248), taking the model-serving endpoint offline. The flaw carries CVSS 7.5 with a pure availability impact (C:N/I:N/A:H) and no public exploit identified at time of analysis; it was reported by NVIDIA itself. No confidentiality or integrity compromise is involved — the sole consequence is loss of inference availability.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Know when Triton Inference Server gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (nvidia) · only source for this CVE.
CVSS VectorVendor: nvidia
DescriptionCVE.org
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.
Articles & Coverage 1
Executive ViewAI
NVIDIA Triton Inference Server on Linux is vulnerable to a remote denial-of-service attack that crashes the service and takes model-serving endpoints offline, directly impacting organizations that rely on ML inference for customer-facing or mission-critical applications. The flaw affects all unauthenticated network users and requires no special privileges, creating organization-wide exposure across all Triton deployments. Immediate inventory and mitigation planning are necessary to maintain inference availability until a vendor patch becomes available.
Within 24 hours, identify all systems running NVIDIA Triton Inference Server on Linux and assess their criticality to business operations; implement enhanced monitoring and alerting for service crashes or restarts, and establish a communication protocol for on-call teams to respond to inference outages. Within 7 days, deploy network segmentation to restrict Triton access to trusted internal clients where possible, implement connection-rate limiting at the application or load-balancer layer, and configure automated service restart mechanisms to restore availability during incidents. Within 30 days, monitor NVIDIA's security advisories for patch releases; establish a testing and deployment plan for the upcoming patch, prioritizing critical inference workloads; and evaluate architectural changes such as load-balanced failover clusters to reduce impact of individual service failures.
No vendor-released patch identified at time of analysis. Interim mitigations include: restrict network access to Triton via firewall rules or VPC isolation; implement connection-rate limiting at the application or network boundary; configure process restart automation (e.g., systemd service restarts or container orchestration policies); deploy health-check monitoring with automated failover to redundant instances; and apply resource limits (memory, CPU) to constrain crash scope. These controls reduce but do not eliminate risk; patch deployment is the primary remediation path.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Triton Inference Server
View allAuthentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach
Authentication bypass in NVIDIA Triton Inference Server allows remote unauthenticated attackers to circumvent access con
Integer overflow in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigger
Out-of-bounds read in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigge
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitr
NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system fi
NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an impro
Denial of service in NVIDIA Triton Inference Server for Linux allows remote unauthenticated attackers to exhaust server
Denial of service in NVIDIA Triton Inference Server for Linux (versions through 26.03) allows a remote attacker to crash
Denial of service in NVIDIA Triton Inference Server for Linux exposes AI inference infrastructure to remote disruption t
Unbounded resource allocation in NVIDIA Triton Inference Server for Linux allows remote, unauthenticated attackers to ex
Exploit-DB