Denial of Service Vulnerability in NVIDIA Triton Inference Server on Windows and Linux
CVE-2025-23335

4.4MEDIUM

Key Information:

Vendor

Nvidia
Status
Triton Inference Server
Vendor
CVE Published:
6 August 2025

What is CVE-2025-23335?

NVIDIA Triton Inference Server, along with its Tensor RT backend for both Windows and Linux, is susceptible to a vulnerability that can be triggered by specific model configurations and inputs. If exploited, this flaw could lead to a denial of service, potentially interrupting the normal operation of applications relying on the server. It is essential for users to review their configurations and stay updated with patches to mitigate this risk.

Affected Version(s)

Triton Inference Server Windows All versions prior to 25.05

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23335
https://www.cve.org/CVERecord?id=CVE-2025-23335
https://nvidia.custhelp.com/app/answers/detail/a_id/5687

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23335 : Denial of Service Vulnerability in NVIDIA Triton Inference Server on Windows and Linux