/Vulnerability Library

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

CVE-2026-24207
Verified

Description

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions.

Severity

Critical

CVSS Score

9.8

Exploit Probability

3%

Affected Product

triton-inference-server

Published Date

June 28, 2026

Template Author

vixianschool

CVE-2026-24207.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-24207
CWE ID:
cwe-288

References

https://github.com/offseckit/CVE-2026-24207https://offseckit.com/blog/cve-2026-24207

Remediation Steps

Update to the latest version of NVIDIA Triton Inference Server.