CVE-2026-24206
Authentication Bypass in NVIDIA Triton Inference Server
Publication date: 2026-05-20
Last updated on: 2026-05-20
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | triton_inference_server | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-288 | The product requires authentication, but the product has an alternate path or channel that does not require authentication. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-24206 is a vulnerability in the NVIDIA Triton Inference Server that allows an attacker to bypass authentication.
Exploiting this flaw could enable the attacker to escalate privileges, cause denial of service, or disclose unauthorized information.
The vulnerability is classified under CWE-288, which involves authentication bypass through alternate paths or channels.
How can this vulnerability impact me? :
This vulnerability can have several serious impacts if exploited.
- Escalation of privileges, allowing attackers to gain higher access rights than intended.
- Denial of service, potentially disrupting the availability of the NVIDIA Triton Inference Server.
- Information disclosure, leading to unauthorized access to sensitive data.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability in NVIDIA Triton Inference Server allows an attacker to bypass authentication, potentially leading to privilege escalation, denial of service, or information disclosure.
To mitigate this vulnerability, it is recommended to follow the guidance provided in NVIDIA's official advisory available at https://nvidia.custhelp.com/app/answers/detail/a_id/5828.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify how the authentication bypass vulnerability in NVIDIA Triton Inference Server directly affects compliance with common standards and regulations such as GDPR or HIPAA.