Triton Inference Server: Missing authentication

Impact

Missing authentication -> full unauthorized control of the server

Who can reach it

Network-adjacent unauthenticated

What to do

Emergency Triton upgrade + redeploy all serving images; gate the endpoint behind authn immediately

References

Related entries

• Triton Inference Server: RCE via path traversal on the model-load APICVE-2024-0087 · Triton Inference ServerCritical
• Triton Inference Server: Improper logging of security events (audit gap)CVE-2024-0095 · Triton Inference ServerCritical
• Triton Inference Server: RCE / privesc via input-validation failureCVE-2025-23268 · Triton Inference ServerHigh
• Triton Inference Server: Info disclosure / RCE (OOB read in tensor processing)CVE-2026-24213 · Triton Inference ServerHigh
• Triton Inference Server: RCE (integer overflow in model config parsing)CVE-2026-24214 · Triton Inference ServerHigh
• Triton Inference Server: RCE / privesc / data tampering via model-load path traversal (`--model-control explicit`)CVE-2023-31036 · Triton Inference ServerHigh