Database/AI/ML frameworks & serving
NVIDIA Triton Inference Server (Python backend): Attacker-controlled input in the Python backend
CVE-2025-23316AI/ML frameworks & servingcurated
Impact
Attacker-controlled input in the Python backend → remote code execution
Who can reach it
Unauthenticated network to an exposed Triton HTTP/gRPC port
What to do
Patch to the fixed Triton release and rebuild NGC-derived images. Provider-published Triton images must be rebuilt, not just re-tagged
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.