highCVSS 7.5NVD status: Analyzed

CVE-2025-23329

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause memory corruption by identifying and accessing the shared memory region used by the Python backend.

ComponentNVIDIA Triton Inference Server
Severityhigh (CVSS 7.5)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published (NVD)2025-09-17
Last modified2026-06-17
Affected versions
triton_inference_server < 25.08
Fixed in25.08
WeaknessCWE-284CWE-787
CISA KEVnot listed

NVD description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause memory corruption by identifying and accessing the shared memory region used by the Python backend. A successful exploit of this vulnerability might lead to denial of service.

Does CVE-2025-23329 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for NVIDIA Triton Inference Server.
Check my stack

What to do

  • Upgrade NVIDIA Triton Inference Server to 25.08 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other NVIDIA Triton Inference Server CVEs

All NVIDIA Triton Inference Server CVEs