CVE-2026-24207 Auth bypass in Triton Inference Server

Critical 9.8 Published 20 May 2026 Updated 20 May 2026

Attackers can bypass authentication in NVIDIA Triton Inference Server to execute code, escalate privileges, tamper with data, or cause denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-24207?

CVE-2026-24207 is a critical authentication bypass vulnerability in Nvidia Triton Inference Server, published on 20 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Weakness: CWE-288

Which versions are affected by CVE-2026-24207?

It affects 1 product.

Products include Nvidia Triton Inference Server.

How do I fix CVE-2026-24207?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2026-24207 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-24207 exists.

Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.

All Nvidia Triton Inference Server vulnerabilities

Sources

Also known as GHSA-gfjf-7c33-r54h, MINI-jwf4-98mf-pprr.