Server-Side Request Forgery in NVIDIA TensorRT-LLM
CVE-2026-65120

7.1HIGH

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
27 October 2026

What is CVE-2026-65120?

NVIDIA TensorRT-LLM is affected by a vulnerability that allows an attacker to exploit server-side request forgery (SSRF). This security flaw can expose sensitive information by enabling unauthorized requests to internal resources, potentially compromising data integrity and confidentiality. Users are advised to apply security patches and monitor their systems for suspicious activities.

Affected Version(s)

TensorRT-LLM All 1.3.0rc24

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.