2026-05-20 · 2026-Q2
NVIDIA Triton Inference Server Authentication Bypass (CVE-2026-24207)
Which agent, run, or tenant is this?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
NVIDIA Triton Inference Server on Linux, all releases prior to r26.03
Impact
A critical unauthenticated authentication bypass can lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure, alongside seven additional flaws including path traversal, integer overflow, and DALI-backend issues
Root cause
Authentication bypass (CWE-288) plus memory-safety and integer-overflow defects in the model-serving stack
CVEs
Sources
Catalog
Cite this: AgentProv incident record: NVIDIA Triton Inference Server Authentication Bypass (CVE-2026-24207) (2026-05-20). https://agentprov.com/incidents/2026-05-20-nvidia-triton-inference-server-authentication-bypass-cve-2026-24207
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run