| Component | NVIDIA Triton Inference Server |
| Severity | critical (CVSS 9) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H |
| Published (NVD) | 2024-05-14 |
| Last modified | 2026-06-17 |
| Affected versions | triton_inference_server >= 20.10, < 24.04 |
| Fixed in | 24.04 |
| Weakness | CWE-73 |
| CISA KEV | not listed |
NVD description
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
What to do
- Upgrade NVIDIA Triton Inference Server to
24.04or later. - Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
Read more
Other NVIDIA Triton Inference Server CVEs
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of...
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit...
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A...
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exp...
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful expl...
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might l...