Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead to denial of service.
Published: 2026-07-01
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use-after-free condition in NVIDIA Triton Inference Server for Linux. If an object is freed, an attacker can trigger an access to that memory through subsequent operations, causing the server process to terminate. The official description states that a successful exploit might lead to denial of service to legitimate clients. No information about confidentiality or integrity impact is provided.

Affected Systems

All deployments of NVIDIA Triton Inference Server on Linux are potentially affected. The vendor has not disclosed specific affected versions, so any current installation may be vulnerable until a vendor-supplied fix is released.

Risk and Exploitability

The CVSS score of 5.9 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that the exploit can be triggered remotely by sending a crafted inference request; however, no public exploit has been reported. The risk is primarily to service availability rather than confidentiality or integrity.

Generated by OpenCVE AI on July 21, 2026 at 14:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check NVIDIA's support site for a Triton Inference Server patch and apply it if available.
  • Restrict external access to inference endpoints using firewall rules or proxy authentication to reduce the attack surface.
  • Monitor the Triton service for crashes and configure automatic restarts to maintain high availability.

Generated by OpenCVE AI on July 21, 2026 at 14:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 21 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server for Linux Leading to Denial of Service

Fri, 17 Jul 2026 13:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server for Linux Leading to Denial of Service

Thu, 16 Jul 2026 12:00:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA Triton Inference Server Causes Denial of Service

Tue, 14 Jul 2026 18:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA Triton Inference Server Causes Denial of Service

Tue, 14 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free causing Denial of Service in NVIDIA Triton Inference Server

Sun, 12 Jul 2026 09:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free causing Denial of Service in NVIDIA Triton Inference Server

Sat, 11 Jul 2026 08:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free Denial of Service in NVIDIA Triton Inference Server

Fri, 10 Jul 2026 17:00:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free Denial of Service in NVIDIA Triton Inference Server

Thu, 09 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server Leading to Denial of Service

Wed, 08 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server Leading to Denial of Service

Wed, 08 Jul 2026 07:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free Vulnerability in NVIDIA Triton Inference Server Leading to Denial of Service

Tue, 07 Jul 2026 15:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free Vulnerability in NVIDIA Triton Inference Server Leading to Denial of Service

Tue, 07 Jul 2026 02:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA Triton Inference Server Causes Server Crash

Mon, 06 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA Triton Inference Server Causes Server Crash

Mon, 06 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server Leading to Denial of Service

Sun, 05 Jul 2026 13:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server Leading to Denial of Service

Sun, 05 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
Title NVIDIA Triton Inference Server Use-After-Free Vulnerability Leading to Denial of Service

Sat, 04 Jul 2026 06:45:00 +0000

Type Values Removed Values Added
Title NVIDIA Triton Inference Server Use-After-Free Vulnerability Leading to Denial of Service

Fri, 03 Jul 2026 16:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free Vulnerability in NVIDIA Triton Inference Server Causing Denial of Service

Fri, 03 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free Vulnerability in NVIDIA Triton Inference Server Causing Denial of Service

Thu, 02 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server Leading to Denial of Service

Thu, 02 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in NVIDIA Triton Inference Server Leading to Denial of Service

Thu, 02 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free on NVIDIA Triton Inference Server Leading to Denial of Service

Wed, 01 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia triton Inference Server
Vendors & Products Nvidia
Nvidia triton Inference Server

Wed, 01 Jul 2026 20:00:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free on NVIDIA Triton Inference Server Leading to Denial of Service

Wed, 01 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 01 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

Nvidia Triton Inference Server
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-07-01T15:55:42.553Z

Reserved: 2026-01-21T19:09:49.054Z

Link: CVE-2026-24266

cve-icon Vulnrichment

Updated: 2026-07-01T15:55:39.245Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-21T14:15:04Z

Weaknesses