Denial of Service in NVIDIA Triton Inference Server

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: NVIDIA Corporation

Description

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-09

AI Q&A

2026-09-09

EPSS Evaluated

N/A

NVD

CVE-2026-16497

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	triton_inference_server	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-834	The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Attack-Flow Graph

Executive Summary

This vulnerability in NVIDIA Triton Inference Server for Linux allows an attacker to cause excessive iteration, potentially leading to a denial of service condition by consuming excessive system resources.

Impact Analysis

An attacker could exploit this to disrupt services by making the system unresponsive or crashing it, affecting availability of the Triton Inference Server.

Mitigation Strategies

Update NVIDIA Triton Inference Server to the latest patched version immediately to address the excessive iteration vulnerability. Monitor network traffic for unusual patterns that may indicate exploitation attempts. Restrict access to the Triton Inference Server to trusted networks or users only.

Hi! I’m here to help you understand CVE-2026-16497. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70