NVIDIA Triton Inference Server for Linux contains a path traversal weakness that could allow an attacker to reference files outside the intended directory, potentially triggering a denial of service. The flaw is identified as CWE‑22, indicating improper handling of relative paths. Successful exploitation can disrupt service availability by causing the server to attempt I/O operations on protected resources or crash.

The vulnerability affects NVIDIA Triton Inference Server running on Linux; specific version information is not provided, meaning all deployments of this product are potentially impacted until a patch is applied.

The CVSS score of 9.8 signals critical severity, with an undefined EPSS score suggesting no publicly known exploitation frequency yet. The lack of KEV listing indicates no confirmed public exploitation, but the high score and path traversal nature imply a serious data‑access risk. The likely attack vector is remote, via network or API interactions that can be crafted to direct the server to use malicious paths. Because the server typically runs with elevated privileges, an attacker could trigger a service crash or resource exhaustion, resulting in denial of service.