Deserialization Vulnerability in NVIDIA TRT-LLM for Multiple Platforms
CVE-2026-24142

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Tensorrt-llm
Vendor
CVE Published:
20 May 2026

What is CVE-2026-24142?

NVIDIA TRT-LLM contains a deserialization vulnerability that exposes users to potential risks such as unauthorized code execution, data tampering, and sensitive information disclosure. Attackers may exploit this weakness by crafting malicious data to manipulate the application’s serialized handle, posing serious security threats across all platforms where TRT-LLM is deployed.

Affected Version(s)

TensorRT-LLM All 0

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24142
https://www.cve.org/CVERecord?id=CVE-2026-24142
https://nvidia.custhelp.com/app/answers/detail/a_id/5805

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.