PT-2026-42092 · Nvidia · Triton Inference Server

CVE-2026-24207 · Published 2026-05-20 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server versions prior to r26.03

Description An authentication bypass exists in the server that could allow an attacker to gain unauthorized access. Successful exploitation may result in code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Recommendations Update to version r26.03.

Fix

DoS

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-24207

Affected Products

Triton Inference Server

References · 11

• https://cve.org/CVERecord?id=CVE-2026-24207 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5828 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24207 · Security Note
• https://twitter.com/pdnuclei_bot/status/2076743497370280001 · Twitter Post
• https://twitter.com/lyrie_ai/status/2077997026076205540 · Twitter Post
• https://twitter.com/integ_sec/status/2063233208498495960 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2056936032357294165 · Twitter Post
• https://twitter.com/CVEnew/status/2056994202681254300 · Twitter Post
• https://twitter.com/lyrie_ai/status/2077997027321897042 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1tinrk9/critical_authentication_bypass_found_in_nvidia · Reddit Post
• https://t.me/CVEtracker/54337 · Telegram Post