CVE-2026-47479

Uncontrolled Resource Consumption in NVIDIA Triton Inference Server

View on CVE.org
Published Jul 14, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.

Analysis

AI-generated

Technical impact

NVIDIA Triton Inference Server for Linux contains a flaw that allows an attacker to cause uncontrolled resource consumption, which may lead to a denial of service. The weakness is identified as CWE-400 and permits the attacker to exhaust available memory or CPU.

Affected Systems

The vulnerability affects NVIDIA Triton Inference Server running on Linux platforms. No specific version information is provided in the available data, so the issue may exist in multiple or all released versions of the product.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity, but the EPSS score of less than 1% suggests that exploitation is currently unlikely. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is not explicitly stated; it is inferred that a remote attacker could network, assuming no additional access controls prevent it.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update NVIDIA Triton Inference Server to the latest release containing the fix; restrict the number of concurrent inference requests (e.g., by applying connection limits or rate‑limiting mechanisms) to reduce the risk of resource depletion.
  • Continuously monitor server resource utilization and set alerts for abnormal memory or CPU consumption so that any attempt to exploit the flaw can be detected early.
  • Configure operating‑system resource limits such as cgroups, ulimit, or container quotas to constrain the maximum memory and CPU available to each inference process, preventing a single request from exhausting all resources.

Generated by OpenCVE AI on July 31, 2026 at 05:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Uncontrolled Resource Consumption in NVIDIA Triton Inference Server
Type Values Removed Values Added
Title Resource Exhaustion Exploit in NVIDIA Triton Inference Server
Type Values Removed Values Added
Title Resource Exhaustion Exploit in NVIDIA Triton Inference Server
Type Values Removed Values Added
Title Uncontrolled Resource Consumption in NVIDIA Triton Inference Server Leading to Possible Denial of Service
Type Values Removed Values Added
Title Uncontrolled Resource Consumption in NVIDIA Triton Inference Server Leading to Possible Denial of Service
Type Values Removed Values Added
First Time appeared Nvidia
Nvidia triton Inference Server
Vendors & Products Nvidia
Nvidia triton Inference Server
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-400
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
Earlier changes (3)
Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

Sources

Status
PUBLISHED
Assigner
nvidia
Published
Updated
Jul 15, 2026, 2:36 PM
Reserved
May 19, 2026, 7:55 PM

View source JSON

Updated
Jul 15, 2026, 2:36 PM

JSON

Status
Deferred
Published
Jul 14, 2026, 8:17 PM
Modified
Oct 24, 2026, 9:10 PM

View source JSON

No data.

Updated
Jul 31, 2026, 5:15 AM

JSON