CVE-2026-24234

Deferred Deferred - Pending Action

NVIDIA TensorRT-LLM Server-Side Request Forgery

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: NVIDIA Corporation

Description

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-24234

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	tensorrt-llm	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

NVIDIA TensorRT-LLM for Linux has a vulnerability in functions that fetch multimodal media. An attacker with network access could exploit this to perform server-side request forgery, potentially causing denial of service or leaking information.

Detection Guidance

Detection of CVE-2026-24234 requires monitoring network traffic for unusual server-side request forgery patterns, especially in TensorRT-LLM components. Check logs for unexpected outbound requests or anomalies in multimodal media fetching functions. Use network monitoring tools like tcpdump or Wireshark to inspect traffic for suspicious activity.

Impact Analysis

An attacker could exploit this to cause denial of service by overwhelming the system or disclose sensitive information by accessing restricted data. The impact includes service disruption and potential data leaks.

Compliance Impact

This vulnerability could lead to unauthorized data access or disclosure, violating GDPR and HIPAA requirements for data protection and confidentiality. Compliance may be compromised if exploited.

Mitigation Strategies

Update NVIDIA TensorRT-LLM to the latest patched version immediately to address the server-side request forgery vulnerability. Restrict network access to the affected functions if possible and monitor for unusual outbound requests or denial of service symptoms.

Hi! I’m here to help you understand CVE-2026-24234. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70