Denial of Service Vulnerability in NVIDIA Triton Inference Server
CVE-2026-24158

7.5HIGH

Key Information:

Vendor

Nvidia
Status
Triton Inference Server
Vendor
CVE Published:
24 March 2026

What is CVE-2026-24158?

NVIDIA Triton Inference Server has a vulnerability within its HTTP endpoint that allows attackers to trigger a denial of service condition. By sending an excessively large compressed payload, an attacker can disrupt the server's operations, leading to service outages and degraded performance. This vulnerability emphasizes the importance of carefully validating input sizes in server communications to prevent potential disruptions.

Affected Version(s)

Triton Inference Server All All versions prior to 26.01

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24158
https://www.cve.org/CVERecord?id=CVE-2026-24158
https://nvidia.custhelp.com/app/answers/detail/a_id/5790

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.