NVIDIA Tensorrt-Llm vulnerabilities

13 CVEs affecting NVIDIA Tensorrt-Llm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-47475, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-24233, published 2026-07-14. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of…
CVE-2026-47472, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this…
CVE-2026-24220, published 2026-07-14. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful…
CVE-2026-47471, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might…
CVE-2025-23254, published 2025-05-01. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this…
CVE-2026-24259, published 2026-07-14. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code…
CVE-2026-24229, published 2026-07-14. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the…
CVE-2026-47475, published 2026-07-14. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this…
CVE-2026-47470, published 2026-07-14. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability…
CVE-2026-24271, published 2026-07-14. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of…

Latest

CVE-2026-47473, published 2026-07-14. High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service,…
CVE-2026-24234, published 2026-07-14. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of…