Authentication Bypass in NVIDIA Triton Inference Server

Executive Summary

CVE-2026-24207 is a vulnerability in the NVIDIA Triton Inference Server that allows an attacker to bypass authentication.

This means an attacker can gain unauthorized access without proper credentials.

The vulnerability is classified as an authentication bypass using an alternate path or channel (CWE-288).

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in NVIDIA Triton Inference Server allows an attacker to bypass authentication, potentially leading to code execution, privilege escalation, data tampering, denial of service, or information disclosure.

Such impacts could negatively affect compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and secure access controls.

However, the provided information does not explicitly describe the direct effects on compliance with these standards.

Useful 0 Not Useful 0

Impact Analysis

Exploiting this vulnerability could lead to several severe impacts including:

• Code execution by the attacker
• Escalation of privileges
• Data tampering
• Denial of service
• Information disclosure

The vulnerability has a critical CVSS v3.1 base score of 9.8, indicating high severity and ease of exploitation.

Useful 0 Not Useful 0