NVIDIA Triton Inference Server for Linux contains an absolute path traversal vulnerability that can allow an attacker to read or write arbitrary files. Exploitation of this flaw may lead to code execution and information disclosure, allowing an adversary to compromise the confidentiality, integrity, and availability of the system. The weakness corresponds to CWE‑36. The reported CVSS score of 6.5 indicates a moderate severity issue that could be impactful if successfully exploited.

The vulnerability affects NVIDIA Triton Inference Server running on Linux. No specific version numbers are listed in the advisory, so any installed instance of this product that has not been patched may be susceptible.

With a CVSS of 6.5 and no EPSS result available, the exploitation likelihood is uncertain but the flaw could be leveraged by an attacker who can provide crafted model data or file paths. The vulnerability is not currently catalogued in the CISA KEV database, suggesting that no mass exploitation has been observed so far. The potential attack path involves manipulating file path inputs used by the inference server, leading to unauthenticated file access or executable code injection if the target system has write permissions to critical directories.