Is CVE-2026-24208 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24208 being exploited in the wild.

How severe is CVE-2026-24208?

Medium severity, with a CVSS score of 5.3, published 20 May 2026.

Is there a fix for CVE-2026-24208?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24208 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-24208?

Check whether you run Nvidia Triton Inference Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24208: NVIDIA Triton Inference Server path traversal

CVE-2026-24208 · Severity: medium · CVSS 5.3 · Published 2026-05-20

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, is affected by a path traversal vulnerability. An attacker can exploit this flaw to interfere with the server's file handling, potentially causing the service to crash or become unavailable. This could disrupt AI-driven business operations and applications relying on the server for real-time predictions.

Technologies: Nvidia Triton Inference Server. Vendors: Nvidia.

Quick answers

Is CVE-2026-24208 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24208 being exploited in the wild.
How severe is CVE-2026-24208?: Medium severity, with a CVSS score of 5.3, published 20 May 2026.
Which products and versions are affected?: NVIDIA Triton Inference Server.
Is there a fix for CVE-2026-24208?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24208 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-24208?: Check whether you run Nvidia Triton Inference Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A path traversal vulnerability (CWE-22) exists in NVIDIA Triton Inference Server. The flaw allows an unauthenticated attacker with network access to provide specially crafted input that bypasses directory restrictions. According to the CVSS metrics, the primary impact of a successful exploit is a partial loss of availability (Denial of Service), while confidentiality and integrity remain unaffected. The vulnerability is reachable over the network without requiring user interaction or specific privileges.

Affected products

NVIDIA Triton Inference Server

Timeline

2026-05-20: disclosed: Initial publication of the CVE record.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.