CVE-2026-47476

Awaiting Analysis Awaiting Analysis - Queue

Uncontrolled Resource Consumption in NVIDIA Triton Inference Server

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: NVIDIA Corporation

Description

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-47476

EUVD

EUVD-2026-44411

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	triton_inference_server	*
nvidia	triton_inference_server	to 26.04 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability in NVIDIA Triton Inference Server for Linux allows an attacker to cause uncontrolled resource consumption, which could lead to a denial of service. The issue is classified under CWE-400 (Uncontrolled Resource Consumption).

Impact Analysis

An attacker could exploit this flaw to consume excessive server resources, causing the Triton Inference Server to become unresponsive or crash. This may disrupt services relying on the server, leading to downtime or degraded performance.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling denial of service attacks, potentially disrupting services handling sensitive data. Uncontrolled resource consumption may lead to service unavailability, violating availability requirements in these regulations.

Mitigation Strategies

Update Triton Inference Server for Linux to a version beyond 26.04 to address the uncontrolled resource consumption vulnerability. Monitor system resources for unusual consumption patterns and restrict network access to the server to reduce exposure.

Hi! I’m here to help you understand CVE-2026-47476. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70