Path Traversal in NVIDIA Triton Inference Server

Executive Summary

This vulnerability in NVIDIA Triton Inference Server for Linux allows an attacker to perform path traversal, which could lead to denial of service. The issue is due to improper handling of file paths, enabling unauthorized access to restricted directories.

Useful 0 Not Useful 0

Detection Guidance

Detecting CVE-2026-47627 requires checking for path traversal attempts in NVIDIA Triton Inference Server logs or network traffic. Monitor for unusual file access patterns or errors indicating directory traversal. Review server logs for requests containing sequences like '../' or '%2e%2e%2f' which may indicate exploitation attempts.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to access sensitive files or directories, potentially causing system disruption or denial of service. The high CVSS score indicates significant risk of confidentiality, integrity, and availability impacts.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows path traversal which could lead to unauthorized access or denial of service. This may impact compliance with GDPR by risking unauthorized data access or processing disruptions, and with HIPAA by potentially exposing protected health information or disrupting critical services.

Useful 0 Not Useful 0

Mitigation Strategies

Update NVIDIA Triton Inference Server to a patched version beyond 0.0-26.05. Monitor NVIDIA's product security page for updates and apply security patches promptly.

Useful 0 Not Useful 0