Is CVE-2026-24206 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24206 being exploited in the wild.

How severe is CVE-2026-24206?

High severity, with a CVSS score of 7.3, published 20 May 2026.

Is there a fix for CVE-2026-24206?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24206 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-24206?

Check whether you run Nvidia Triton Inference Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24206: NVIDIA Triton Inference Server authentication bypass

CVE-2026-24206 · Severity: high · CVSS 7.3 · Published 2026-05-20

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, contains a security flaw that allows unauthorized users to bypass authentication. If exploited, an attacker could gain unauthorized access to the system, potentially leading to the theft of sensitive data, disruption of AI services, or unauthorized administrative control. This poses a significant risk to organizations relying on the server for critical machine learning operations.

Technologies: Nvidia Triton Inference Server. Vendors: Nvidia.

Quick answers

Is CVE-2026-24206 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24206 being exploited in the wild.
How severe is CVE-2026-24206?: High severity, with a CVSS score of 7.3, published 20 May 2026.
Which products and versions are affected?: NVIDIA Triton Inference Server.
Is there a fix for CVE-2026-24206?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24206 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-24206?: Check whether you run Nvidia Triton Inference Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

NVIDIA Triton Inference Server is vulnerable to an authentication bypass (CWE-288) via an alternate path or channel. The vulnerability allows a remote, unauthenticated attacker to bypass security controls over the network without any user interaction. Successful exploitation could grant the attacker elevated privileges, the ability to cause a denial of service (DoS) condition, or unauthorized access to sensitive information stored or processed by the inference server. The issue is tracked as CVE-2026-24206 with a CVSS base score of 7.3.

Affected products

NVIDIA Triton Inference Server

Timeline

2026-05-20: disclosed: Initial publication of the CVE record.
2026-05-20: advisory: NVIDIA released security bulletin 5828.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.