CVE-2025-33238
Denial of Service via Exception in NVIDIA Triton HTTP Server
Publication date: 2026-03-24
Last updated on: 2026-03-31
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | triton_inference_server | to 26.01 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-362 | The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
To mitigate the CVE-2025-33238 vulnerability in the NVIDIA Triton Inference Server Sagemaker HTTP server, users should update to Triton Inference Server version 26.01 or later.
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': "CVE-2025-33238 is a vulnerability in the NVIDIA Triton Inference Server's Sagemaker HTTP server component. It allows an attacker to cause an exception by exploiting a race condition involving concurrent execution using shared resources with improper synchronization."}, {'type': 'paragraph', 'content': 'This exception can lead to a denial of service (DoS) condition, disrupting the availability of the server.'}] [2, 3]
How can this vulnerability impact me? :
The vulnerability can be exploited remotely without any privileges or user interaction, resulting in a denial of service (DoS) condition.
This means that an attacker can cause the NVIDIA Triton Inference Server to become unavailable, impacting the availability of services relying on this server.
There is no impact on confidentiality or integrity, but the availability impact is high.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know