CVE-2025-23268 Code injection in Triton Inference Server
An attacker can achieve code execution in NVIDIA Triton Inference Server via improper input validation in the DALI backend.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-23268?
CVE-2025-23268 is a high-severity code injection vulnerability in Nvidia Triton Inference Server, published on 17 Sep 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution.
Weakness: CWE-20
Which versions are affected by CVE-2025-23268?
It affects 1 product.
Products include Nvidia Triton Inference Server.
How do I fix CVE-2025-23268?
Apply the vendor's patch.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-23268 being exploited?
There is no known exploitation of CVE-2025-23268 in the wild and no public exploit code.
Other vulnerabilities in Nvidia Triton Inference Server
Sources
Also known as GHSA-hmf3-jm6w-7cf3, MINI-24x7-4rpp-4c5p.