# CVE-2026-24206: NVIDIA Triton Inference Server authentication bypass

Source: https://junglewise.ai/threats/cve-2026-24206-nvidia-triton-inference-server-authentication-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-20. Updated: 2026-05-20  
License: CC BY 4.0 with a link back

CVE-2026-24206 · Severity: high · CVSS 7.3 · Published 2026-05-20

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, contains a security flaw that allows unauthorized users to bypass authentication. If exploited, an attacker could gain unauthorized access to the system, potentially leading to the theft of sensitive data, disruption of AI services, or unauthorized administrative control. This poses a significant risk to organizations relying on the server for critical machine learning operations.

Technologies: [Nvidia Triton Inference Server](https://junglewise.ai/threats/technologies/triton-inference-server). Vendors: [Nvidia](https://junglewise.ai/threats/vendors/nvidia).

## Quick answers

**Is CVE-2026-24206 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-24206 being exploited in the wild.

**How severe is CVE-2026-24206?** High severity, with a CVSS score of 7.3, published 20 May 2026.

**Which products and versions are affected?** NVIDIA Triton Inference Server.

**Is there a fix for CVE-2026-24206?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-24206 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-24206?** Check whether you run Nvidia Triton Inference Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

NVIDIA Triton Inference Server is vulnerable to an authentication bypass (CWE-288) via an alternate path or channel. The vulnerability allows a remote, unauthenticated attacker to bypass security controls over the network without any user interaction. Successful exploitation could grant the attacker elevated privileges, the ability to cause a denial of service (DoS) condition, or unauthorized access to sensitive information stored or processed by the inference server. The issue is tracked as CVE-2026-24206 with a CVSS base score of 7.3.

## Affected products

- NVIDIA Triton Inference Server

## Timeline

- 2026-05-20: disclosed: Initial publication of the CVE record.
- 2026-05-20: advisory: NVIDIA released security bulletin 5828.

## References

- [https://nvidia.custhelp.com/app/answers/detail/a_id/5828](https://nvidia.custhelp.com/app/answers/detail/a_id/5828)
- [https://www.cve.org/CVERecord?id=CVE-2026-24206](https://www.cve.org/CVERecord?id=CVE-2026-24206)

## Related threats

- [NVIDIA Triton Inference Server authorization bypass](https://junglewise.ai/threats/cve-2026-47625-nvidia-triton-inference-server-authorization-bypass)
- [NVIDIA Triton Inference Server excessive iteration denial of service](https://junglewise.ai/threats/cve-2026-16497-nvidia-triton-inference-server-excessive-iteration-denial-of)
- [NVIDIA Triton Inference Server path traversal](https://junglewise.ai/threats/cve-2026-47630-nvidia-triton-inference-server-path-traversal)
- [NVIDIA Triton Inference Server improper input validation](https://junglewise.ai/threats/cve-2026-47629-nvidia-triton-inference-server-improper-input-validation)
- [NVIDIA Triton Inference Server resource exhaustion denial of service](https://junglewise.ai/threats/cve-2026-47628-nvidia-triton-inference-server-resource-exhaustion-denial-of)