# CVE-2026-24207: NVIDIA Triton Inference Server authentication bypass

Source: https://junglewise.ai/threats/cve-2026-24207-nvidia-triton-inference-server-authentication-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-20. Updated: 2026-05-20  
License: CC BY 4.0 with a link back

CVE-2026-24207 · Severity: critical · CVSS 9.8 · Published 2026-05-20

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, contains a critical security flaw that allows attackers to bypass authentication. By exploiting this weakness, an unauthorized user could gain full control over the server, potentially leading to the theft of sensitive AI models, data tampering, or a complete shutdown of AI-driven services. This poses a significant risk to business operations and intellectual property stored within the inference environment.

Technologies: [Nvidia Triton Inference Server](https://junglewise.ai/threats/technologies/triton-inference-server). Vendors: [Nvidia](https://junglewise.ai/threats/vendors/nvidia).

## Quick answers

**Is CVE-2026-24207 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-24207 being exploited in the wild.

**How severe is CVE-2026-24207?** Critical severity, with a CVSS score of 9.8, published 20 May 2026.

**Which products and versions are affected?** NVIDIA Triton Inference Server.

**Is there a fix for CVE-2026-24207?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-24207 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-24207?** Check whether you run Nvidia Triton Inference Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

NVIDIA Triton Inference Server is vulnerable to an authentication bypass using an alternate path or channel (CWE-288). The vulnerability allows a remote, unauthenticated attacker to bypass security controls and interact with the server's management or inference APIs. According to the CVSS 3.1 vector, the attack is low complexity and requires no user interaction. Successful exploitation can lead to high impacts on confidentiality, integrity, and availability, including potential remote code execution, privilege escalation, and information disclosure. Users are advised to refer to NVIDIA advisory 5828 for specific patching information.

## Affected products

- NVIDIA Triton Inference Server

## Timeline

- 2026-05-20: disclosed: Initial disclosure by NVIDIA and NVD publication.

## References

- [https://nvidia.custhelp.com/app/answers/detail/a_id/5828](https://nvidia.custhelp.com/app/answers/detail/a_id/5828)
- [https://www.cve.org/CVERecord?id=CVE-2026-24207](https://www.cve.org/CVERecord?id=CVE-2026-24207)

## Related threats

- [NVIDIA Triton Inference Server authorization bypass](https://junglewise.ai/threats/cve-2026-47625-nvidia-triton-inference-server-authorization-bypass)
- [NVIDIA Triton Inference Server excessive iteration denial of service](https://junglewise.ai/threats/cve-2026-16497-nvidia-triton-inference-server-excessive-iteration-denial-of)
- [NVIDIA Triton Inference Server path traversal](https://junglewise.ai/threats/cve-2026-47630-nvidia-triton-inference-server-path-traversal)
- [NVIDIA Triton Inference Server improper input validation](https://junglewise.ai/threats/cve-2026-47629-nvidia-triton-inference-server-improper-input-validation)
- [NVIDIA Triton Inference Server resource exhaustion denial of service](https://junglewise.ai/threats/cve-2026-47628-nvidia-triton-inference-server-resource-exhaustion-denial-of)