NVIDIA Triton Inference Server on Linux contains an improper input validation flaw. The CVE description indicates that an attacker could trigger the flaw, but it does not explicitly state the attack vector. Based on the description, it is inferred that externally supplied data, such as crafted requests, may be used to cause the server to fail or terminate, resulting in a denial of service. The weakness is categorized as CWE‑20 and does not provide code execution or data disclosure but creates an availability problem for inference workloads.

All installations of NVIDIA Triton Inference Server running on Linux are affected, as no version range is specified. Any current deployment is potentially vulnerable until a patched release is applied.

The CVSS score of 7.5 classifies this vulnerability as high severity. EPSS data is not available and the vulnerability is not listed in CISA KEV, so the likelihood of active exploitation is uncertain, though the impact would be significant if achieved. While the description does not explicitly detail the attack surface, it is inferred that an attacker could send repeated malformed requests from a remote location to trigger the flaw, potentially causing the service to crash and denying business‑critical inference requests.