Multiple security vulnerabilities affecting NVIDIA Triton Inference Server versions. These flaws can cause denial of service and impact the availability of AI models running on production servers. The affected version range is all Linux builds from 0.0 through 26.05. The Cumulus Linux GA flaw hits version 5.15. NVOS issues affect specific GB300 and IBSwitch XDR builds.
CVE-2026-47627 (CVSS 9.8 — Critical): A path traversal weakness allows an attacker to send crafted input to reach files outside the intended directory, causing the server to fail and stop responding.[/subscribe_to_unlock_form]
Multiple security vulnerabilities affecting NVIDIA Triton Inference Server versions. These flaws can cause denial of service and impact the availability of AI models running on production servers. The affected version range is all Linux builds from 0.0 through 26.05. The Cumulus Linux GA flaw hits version 5.15. NVOS issues affect specific GB300 and IBSwitch XDR builds.
CVE-2026-47627 (CVSS 9.8 — Critical): A path traversal weakness allows an attacker to send crafted input to reach files outside the intended directory, causing the server to fail and stop responding.[emaillocker id="1283"]
CVE-2026-47628 (CVSS 7.5 — High): Resource exhaustion through unlimited allocation can lead to denial of service.
CVE-2026-24184 (CVSS 7.5 — High): A buffer overflow through crafted LLDP frames can lead to code execution on affected switches.
CVE-2026-47629 (CVSS 7.5 — High): Improper input validation allows an attacker to abuse it, leading to denial of service.
These vulnerabilities collectively present a significant risk to organizations relying on NVIDIA Triton Inference Server for AI model deployment.
The following reports contain further technical details:
[/emaillocker]