PT-2025-32150 · Nvidia · Nvidia Triton Inference Server

Published 2025-08-04 · Updated 2025-08-07 · CVE-2025-23317

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server versions prior to 25.07

Description NVIDIA Triton Inference Server contains a vulnerability in the HTTP server that allows an attacker to initiate a reverse shell by sending a crafted HTTP request. Successful exploitation may result in remote code execution, denial of service, data tampering, or information disclosure.

Recommendations Update NVIDIA Triton Inference Server to version 25.07 or later.

Fix

RCE

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-09649

CVE-2025-23317

Affected Products

Nvidia Triton Inference Server

References · 8

• https://nvidia.custhelp.com/app/answers/detail/a_id/5687 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23317 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23317 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-23317 · Security Note
• https://bdu.fstec.ru/vul/2025-09649 · Security Note
• https://twitter.com/offseq/status/1953267495785132194 · Twitter Post
• https://t.me/CVEtracker/29337 · Telegram Post
• https://twitter.com/HunterMapping/status/1953001034499903682 · Twitter Post