EUVD-2026-44434
GHSA-hhg8-wxrj-m3cf
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-facing unauthenticated inference endpoint (AV:N/PR:N/UI:N) with easy triggering (AC:L); availability-only memory-exhaustion impact (A:H) and no confidentiality or integrity effect.
Primary rating from Vendor (nvidia).
CVSS VectorVendor: nvidia
Lifecycle Timeline
2DescriptionCVE.org
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.
Articles & Coverage 1
AnalysisAI
Denial of service in NVIDIA Triton Inference Server on Linux allows remote unauthenticated attackers to exhaust host memory by triggering a memory leak (CWE-401, missing release of memory after effective lifetime), degrading or crashing the inference service. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, A:H) indicates trivial network-reachable exploitation with no authentication and high availability impact, but no confidentiality or integrity exposure. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Technical ContextAI
NVIDIA Triton Inference Server is a production-grade model-serving platform that exposes HTTP/REST and gRPC endpoints to serve machine-learning models (TensorRT, ONNX, PyTorch, TensorFlow, Python backends) at scale, typically on GPU-equipped Linux hosts. The root cause is CWE-401 (Missing Release of Memory After Effective Lifetime): a code path allocates memory - likely per-request or per-inference buffers, metadata, or backend resources - that is never freed, so repeated requests steadily grow the resident set until the process or host runs out of memory. Because Triton's request-handling surface is network-facing and processes attacker-supplied inputs, an unauthenticated caller can drive this leak remotely. The single affected CPE, cpe:2.3:a:nvidia:triton_inference_server:*, is version-wildcarded and does not pin the vulnerable range.
RemediationAI
No vendor-released patch version is identified in the provided data, and the CPE version is wildcarded, so consult NVIDIA's official security bulletin (linked from the NVD record at https://nvd.nist.gov/vuln/detail/CVE-2026-47482) for the exact fixed release and update the Triton container image or binary to that version once published. As compensating controls while awaiting or applying the fix: restrict access to the Triton HTTP (default 8000) and gRPC (default 8001) inference endpoints to trusted clients only via network segmentation, firewall rules, or an authenticating reverse proxy, since Triton itself provides no built-in authentication - trade-off is that legitimate remote clients must route through the proxy. Additionally, run Triton inside a container or cgroup with a hard memory limit and automatic restart so a leak-induced OOM restarts the service rather than destabilizing the host - trade-off is transient request loss on restart - and add rate limiting on inference requests to slow leak accumulation, at the cost of reduced peak throughput.
More in Triton Inference Server
View allAuthentication bypass in NVIDIA Triton Inference Server allows unauthenticated remote attackers to reach protected funct
Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach
Authentication bypass in NVIDIA Triton Inference Server allows remote unauthenticated attackers to circumvent access con
Integer overflow in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigger
Out-of-bounds read in the DALI backend of NVIDIA Triton Inference Server allows authenticated remote attackers to trigge
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitr
NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system fi
NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an impro
Denial of service in NVIDIA Triton Inference Server for Linux allows remote unauthenticated attackers to exhaust server
Denial of service in NVIDIA Triton Inference Server for Linux (versions through 26.03) allows a remote attacker to crash
Denial of service in NVIDIA Triton Inference Server for Linux exposes AI inference infrastructure to remote disruption t
Unbounded resource allocation in NVIDIA Triton Inference Server for Linux allows remote, unauthenticated attackers to ex
Same weakness CWE-401 – Memory Leak
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today