A flaw in NVIDIA Triton Inference Server’s SageMaker HTTP server allows an attacker to trigger an exception, which can cause the server to become unresponsive and ultimately deny service to legitimate users. The weakness is classified as CWE‑362, a race‑condition condition that leads to a state inconsistency. The resulting impact is a loss of availability for any workloads relying on the affected endpoint.

The vulnerability affects NVIDIA’s Triton Inference Server, specifically the SageMaker HTTP server component. No specific version information is provided in the public record, so all releases of the product that include this component should be considered potentially affected.

The CVSS score of 7.5 denotes a high severity level. The EPSS score is reported as less than 1%, indicating a low probability of exploitation at this time, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote, as the error can be triggered by external HTTP requests to the SageMaker endpoint. Successful exploitation would disrupt service but is unlikely to provide an attacker with other privileges or data access.