Security Flaw in NVIDIA TensorRT-LLM Tokenizer Loading

CVE-2026-65119

What is CVE-2026-65119?

A security vulnerability exists in the KvCacheAwareRouter component of the tokenizer loading in NVIDIA TensorRT-LLM for all platforms. This flaw allows an attacker to manipulate the system into including functionality from an untrusted control sphere. If successfully exploited, it could result in unauthorized code execution, information disclosure, data tampering, or even denial of service, posing significant risks to system integrity and confidentiality.

References