Absolute Path Traversal in NVIDIA Triton Inference Server

Executive Summary

This vulnerability in NVIDIA Triton Inference Server for Linux allows an attacker to perform an absolute path traversal. This means an attacker could access files outside the intended directory structure, potentially leading to unauthorized code execution on the affected system.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the version of NVIDIA Triton Inference Server running on your system. Compare it against the affected version 0.0-26.05. Use commands like 'docker ps' or 'ps aux | grep triton' to identify running instances.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to read sensitive files or execute arbitrary code on your system. This might lead to data breaches, unauthorized access, or system compromise, depending on the attacker's goals and the system's configuration.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update NVIDIA Triton Inference Server to a version beyond 0.0-26.05. If updating is not possible, restrict access to the server and monitor for suspicious activity. Apply network-level controls to limit exposure.

Useful 0 Not Useful 0