CVE-2026-24174
Denial of Service via Malformed Request in NVIDIA Triton Server
Publication date: 2026-04-07
Last updated on: 2026-04-16
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | triton_inference_server | to 26.02 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-681 | When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.
Can you explain this vulnerability to me?
CVE-2026-24174 is a vulnerability in the NVIDIA Triton Inference Server where an attacker can cause the server to crash by sending a malformed request.
This vulnerability is related to incorrect conversion between numeric types (CWE-681).
The attack can be performed remotely over the network without requiring any privileges or user interaction.
How can this vulnerability impact me? :
A successful exploit of this vulnerability can cause a denial of service (DoS) condition by crashing the NVIDIA Triton Inference Server.
This impacts the availability of the server, potentially disrupting services that rely on it.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability in NVIDIA Triton Inference Server allows an attacker to cause a server crash by sending a malformed request, leading to denial of service.
Since the vulnerability can be exploited remotely without privileges or user interaction, immediate mitigation steps should include restricting network access to the Triton Inference Server to trusted sources only.
Additionally, monitor for updates or patches from NVIDIA and apply them as soon as they become available to fix the underlying issue.