PT-2026-42092 · Nvidia · Triton Inference Server

Published 2026-05-20 · Updated 2026-05-20 · CVE-2026-24207

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server versions prior to r26.03

Description An authentication bypass exists in the server that could allow an attacker to gain unauthorized access. Successful exploitation may result in code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Recommendations Update to version r26.03.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-24207

Affected Products

Triton Inference Server

References · 6

• https://nvidia.custhelp.com/app/answers/detail/a_id/5828 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24207 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-24207 · Security Note
• https://reddit.com/r/pwnhub/comments/1tinrk9/critical_authentication_bypass_found_in_nvidia · Reddit Post
• https://twitter.com/the_yellow_fall/status/2056936032357294165 · Twitter Post
• https://twitter.com/CVEnew/status/2056994202681254300 · Twitter Post