Triton Inference Server: Info disclosure / RCE (OOB read in tensor processing)

Impact

Info disclosure / RCE (OOB read in tensor processing)

Who can reach it

Network client sending crafted tensors

What to do

Upgrade Triton; redeploy

References

Related entries

• Triton Inference Server: RCE (integer overflow in model config parsing)CVE-2026-24214 · Triton Inference ServerHigh
• Triton Inference Server: RCE / privesc / data tampering via model-load path traversal (`--model-control explicit`)CVE-2023-31036 · Triton Inference ServerHigh
• Triton Inference Server: concurrent requests trigger a race condition that crashes the server (remote DoS)CVE-2025-33238 · Triton Inference ServerHigh
• Triton Inference Server: DoS via memory exhaustion on malformed inputCVE-2026-24146 · Triton Inference ServerHigh
• Triton Inference Server: Arbitrary file access via unsafe path operationsCVE-2026-24209 · Triton Inference ServerHigh
• Triton Inference Server: DoS / memory corruption (integer overflow in buffer allocation)CVE-2026-24210 · Triton Inference ServerHigh