CVE-2026-24207

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Affected

NVIDIA · Triton Inference Server

CVSS v3.1 NVIDIA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

2.55% chance of exploitation in the next 30 days, 85th percentile

Nuclei

critical · CWE-288

Published

2026-05-20

Proof-of-concept exploits (1)

• offseckit/CVE-2026-242071★ · 2026-06-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24207.yaml

Security advisories

• https://nvidia.custhelp.com/app/answers/detail/a_id/5828
• https://nvd.nist.gov/vuln/detail/CVE-2026-24207
• https://www.cve.org/CVERecord?id=CVE-2026-24207

References

• CVE Record
• NVD entry

Related

• CVE-2026-23813
• CVE-2026-24206