Known vulnerabilities in Triton Inference Server

Vendor: nVidia
Software CPE: cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 43
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Triton Inference Server Triton Inference Server is affected by 43 known vulnerabilities: 6 high, 27 medium, 10 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131789 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-24207
CWE-288 High
No
No
26.03 19.05.2026 SB2026051916
#VU131790 - Out-of-bounds read
CVE-2026-24213
CWE-125 Low
No
No
26.03 19.05.2026 SB2026051916
#VU131791 - Integer overflow
CVE-2026-24214
CWE-190 Low
No
No
26.03 19.05.2026 SB2026051916
#VU131792 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24209
CWE-22 Medium
No
No
26.03 19.05.2026 SB2026051916
#VU131793 - Integer overflow
CVE-2026-24210
CWE-190 Medium
No
No
26.03 19.05.2026 SB2026051916
#VU131794 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-24206
CWE-288 Medium
No
No
26.03 19.05.2026 SB2026051916
#VU131795 - Resource exhaustion
CVE-2026-24215
CWE-400 Low
No
No
26.03 19.05.2026 SB2026051916
#VU131796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24208
CWE-22 Medium
No
No
26.03 19.05.2026 SB2026051916
#VU131723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-33238
CWE-362 Medium
No
No
26.01 18.05.2026 SB2026051885
#VU131724 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-33254
CWE-362 Medium
No
No
26.01 18.05.2026 SB2026051885
#VU131725 - Uncontrolled Memory Allocation
CVE-2026-24158
CWE-789 Medium
No
No
26.01 18.05.2026 SB2026051885
#VU131716 - Uncontrolled Memory Allocation
CVE-2026-24146
CWE-789 Medium
No
No
26.02 18.05.2026 SB2026051883
#VU131717 - Integer overflow
CVE-2026-24173
CWE-190 Medium
No
No
26.02 18.05.2026 SB2026051883
#VU131718 - Incorrect Conversion between Numeric Types
CVE-2026-24174
CWE-681 Medium
No
No
26.02 18.05.2026 SB2026051883
#VU131719 - Uncaught Exception
CVE-2026-24175
CWE-248 Medium
No
No
26.02 18.05.2026 SB2026051883
#VU131720 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24147
CWE-22 Medium
No
No
26.02 18.05.2026 SB2026051883
#VU122402 - Improper input validation
CVE-2025-33211
CWE-20 Medium
No
No
r25.10 05.02.2026 SB2026020574
#VU122401 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-33201
CWE-754 Medium
No
No
r25.10 05.02.2026 SB2026020574
#VU114374 - Uncontrolled Recursion
CVE-2025-23325
CWE-674 Medium
No
No
25.05 22.08.2025 SB2025082221
#VU114373 - Integer overflow
CVE-2025-23324
CWE-190 Medium
No
No
25.05 22.08.2025 SB2025082221


Showing elements 1 - 20 out of 43