GPU VulnDB

Database/AI/ML frameworks & serving

NVIDIA Triton Inference Server (Python backend): Attacker-controlled input in the Python backend

CVE-2025-23316AI/ML frameworks & servingcurated

Impact

Attacker-controlled input in the Python backend → remote code execution

Who can reach it

Unauthenticated network to an exposed Triton HTTP/gRPC port

What to do

Patch to the fixed Triton release and rebuild NGC-derived images. Provider-published Triton images must be rebuilt, not just re-tagged

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.