CVE-2026-47472

Deferred Deferred - Pending Action

NVIDIA TensorRT-LLM Deserialization Flaw Enables Code Execution

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: NVIDIA Corporation

Description

NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-47472

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	tensorrt-llm	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

NVIDIA TensorRT-LLM has a vulnerability in its inter-process communication layer. An attacker with local same-user access could exploit this by causing deserialization issues. This might lead to code execution, information disclosure, data tampering, or denial of service.

Detection Guidance

Detection of this vulnerability requires checking for unusual inter-process communication activity in NVIDIA TensorRT-LLM. Monitor logs for deserialization errors or unexpected process behavior. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code, steal sensitive information, alter data, or disrupt services on systems running NVIDIA TensorRT-LLM. This requires local same-user access, limiting remote exploitation.

Compliance Impact

This vulnerability could lead to unauthorized code execution or data tampering, potentially violating GDPR (data protection) or HIPAA (health data privacy) by exposing or altering sensitive information. Organizations must address it to maintain compliance.

Mitigation Strategies

Update NVIDIA TensorRT-LLM to the latest patched version as soon as possible to address the deserialization vulnerability in the inter-process communication layer.

Hi! I’m here to help you understand CVE-2026-47472. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70