NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers
60
CVE-2025-23317
—CVSS 3.1
9.8 critical
EPSS
2%p79
Published
()
Modified
Description
NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.
- Vendors
- nvidia
- Products
- triton inference server
- Weakness
- CWE-122
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H