Server-Side Request Forgery Vulnerability in NVIDIA TensorRT-LLM
CVE-2026-24269

7.1HIGH

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
27 October 2026

What is CVE-2026-24269?

NVIDIA TensorRT-LLM is susceptible to a server-side request forgery (SSRF) vulnerability that allows attackers to craft malicious requests, potentially enabling unauthorized access to internal resources. Exploitation of this flaw could lead to significant risks, including information disclosure and unauthorized data manipulation, which may compromise the security and integrity of the system. It's critical for users of NVIDIA TensorRT-LLM to apply the necessary patches and updates to mitigate these risks.

Affected Version(s)

TensorRT-LLM All 1.3.0rc24

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.