CVE-2026-47625

CVE-2026-47625 is a missing-authorization flaw (CWE-862) in NVIDIA Triton Inference Server for Linux in which certain requests are not properly checked for permissions before being processed. Because the flaw is reachable over the network with no privileges or user interaction required (per the CVSS vector), an unauthenticated attacker who can reach the server's inference endpoints can trigger it simply by sending crafted requests. NVIDIA states that a successful exploit could lead to information disclosure, data tampering, and denial of service, although the base score (7.5) reflects a high impact on availability specifically. Any organization running Triton Inference Server on Linux, typically in containerized or Kubernetes-based ML serving stacks, is potentially affected. As of now there is no public proof-of-concept, the flaw is not in CISA's KEV catalog, and EPSS estimates only a 0.4% chance of exploitation in the next 30 days.

What to do: Upgrade Triton Inference Server to the fixed release identified in NVIDIA's security bulletin for CVE-2026-47625 (the provided data does not include version numbers). Until patched, restrict network access to Triton's HTTP/gRPC inference endpoints with firewalls or network policies and avoid exposing them directly to the internet without authentication. Check whether your environment runs Triton on Linux and whether its inference ports are reachable from untrusted networks.