NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

criticalseverity

9.8CVSS score

2.6%likelihood of exploitation, next 30 days

85%of all CVEs are less likely

Readycheck to confirm it

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions.

Impact

Attackers can bypass authentication to execute code, escalate privileges, tamper data, cause denial of service, or disclose sensitive information.

Fix

Update to the latest version of NVIDIA Triton Inference Server.

How to confirm it

Send: GET {{BaseURL}}/models
Positive when: status_code == 200 and contains(body, '"models":[') and !contains(body, 'This API is restricted') and !contains(body, 'restricted')

Run it with nuclei: nuclei -id CVE-2026-24207 -u <target>

The full check

id: CVE-2026-24207

info:
  name: NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass
  author: VixianSchool
  severity: critical
  description: |
    NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions.
  impact: |
    Attackers can bypass authentication to execute code, escalate privileges, tamper data, cause denial of service, or disclose sensitive information.
  remediation: |
    Update to the latest version of NVIDIA Triton Inference Server.
  reference:
    - https://github.com/offseckit/CVE-2026-24207
    - https://offseckit.com/blog/cve-2026-24207
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2026-24207
    epss-score: 0.02552
    epss-percentile: 0.85178
    cwe-id: CWE-288
  metadata:
    verified: true
    max-request: 2
    vendor: nvidia
    product: triton-inference-server
    shodan-query: 'http.title:"Triton" port:8080'
  tags: cve,cve2026,nvidia,triton,auth-bypass,rce,ml,ai

http:
  - method: GET
    path:
      - "{{BaseURL}}/models"

    matchers:
      - type: dsl
        dsl:
          - "status_code == 200"
          - "contains(body, '\"models\":[')"
          - "!contains(body, 'This API is restricted')"
          - "!contains(body, 'restricted')"
        condition: and

References

Use this check only on systems you are authorised to test. Where the data comes from