Absolute Path Traversal in NVIDIA Triton Inference Server

Executive Summary

This vulnerability in NVIDIA Triton Inference Server for Linux allows an attacker to perform an absolute path traversal. This means they can access files outside the intended directory structure, potentially leading to code execution and information disclosure.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if NVIDIA Triton Inference Server version 0.0-26.05 is running on your Linux system. Use commands like 'docker ps' to list running containers and 'docker inspect <container_name>' to verify the Triton server version. Look for absolute path traversal attempts in server logs or network traffic.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to access sensitive files, execute arbitrary code, or disclose confidential information. This could compromise system integrity, confidentiality, and availability if the server is exposed to untrusted networks.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update NVIDIA Triton Inference Server to a patched version. If updating is not possible, restrict network access to the server using firewalls or network segmentation. Monitor server logs for suspicious path traversal attempts and disable unnecessary services.

Useful 0 Not Useful 0