Remote Code Execution Vulnerability in NVIDIA Triton Inference Server
CVE-2025-23317

9.1CRITICAL

Key Information:

Vendor

Nvidia
Status
Triton Inference Server
Vendor
CVE Published:
6 August 2025

What is CVE-2025-23317?

NVIDIA Triton Inference Server has a critical vulnerability in its HTTP server component that can be exploited by an attacker sending a specially crafted HTTP request. This exploit allows for the execution of arbitrary code, potentially leading to serious outcomes such as denial of service, data tampering, or unauthorized information disclosure. Organizations using vulnerable versions of this server must apply security patches immediately to mitigate associated risks.

Affected Version(s)

Triton Inference Server Windows All versions prior to 25.07

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23317
https://www.cve.org/CVERecord?id=CVE-2025-23317
https://nvidia.custhelp.com/app/answers/detail/a_id/5687

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23317 : Remote Code Execution Vulnerability in NVIDIA Triton Inference Server