NVIDIA Triton Inference Server has a path traversal flaw that allows an attacker to craft requests that resolve to arbitrary file paths, potentially disrupting server operation by causing a denial of service. The flaw is identified as a directory traversal issue (CWE-22). Successful exploitation results in loss of service availability for the affected server instance, though it does not directly expose sensitive data or result in code execution.

The vulnerability affects NVIDIA Triton Inference Server. No specific versions are listed, so all installations of the product are potentially impacted until a fix is applied.

This issue carries a CVSS score of 5.3, indicating moderate severity. The EPSS score is 5%, indicating a low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no publicly known exploits at the time of reporting. The likely attack vector is inferred to be remote, leveraging the inference API or other exposed request handling mechanisms, though explicit details are not provided in the description.