Vulnerability in NVIDIA TensorRT-LLM for Linux Disaggregated Orchestrator Component

CVE-2026-24229

What is CVE-2026-24229?

NVIDIA TensorRT-LLM for Linux has a vulnerability in its disaggregated orchestrator component, where an attacker could exploit the FastAPI server to send crafted requests. This could allow unauthorized access to internal cluster state, enabling attackers to read, write, or delete sensitive information. Successful exploitation may result in significant consequences, including information disclosure, data manipulation, and potential denial of service, impacting the integrity and availability of the affected system.

References