Is CVE-2026-24214 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24214 being exploited in the wild.

How severe is CVE-2026-24214?

High severity, with a CVSS score of 8, published 20 May 2026.

Which products and versions are affected?

Nvidia Triton Inference Server DALI backend.

Is there a fix for CVE-2026-24214?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24214 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-24214?

Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24214: NVIDIA Triton Inference Server integer overflow in DALI backend

CVE-2026-24214 · Severity: high · CVSS 8 · Published 2026-05-20

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, contains a security flaw in its DALI data processing component. An attacker could exploit this vulnerability to potentially execute unauthorized code, tamper with sensitive data, or crash the service. This could lead to a complete loss of system integrity and significant downtime for AI-driven business operations.

Technologies: Nvidia Triton Inference Server. Vendors: Nvidia.

Quick answers

Is CVE-2026-24214 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24214 being exploited in the wild.
How severe is CVE-2026-24214?: High severity, with a CVSS score of 8, published 20 May 2026.
Which products and versions are affected?: Nvidia Triton Inference Server DALI backend.
Is there a fix for CVE-2026-24214?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24214 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-24214?: Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow vulnerability (CWE-190) exists in the DALI (Data Loading Library) backend of the NVIDIA Triton Inference Server. The flaw is reachable over the network and requires low-level privileges and some degree of user interaction to exploit. If successfully triggered, the overflow can lead to memory corruption, allowing for arbitrary code execution, unauthorized modification of data, or a denial-of-service (DoS) condition. Users are advised to refer to NVIDIA advisory 5828 for specific version patching information.

Affected products

NVIDIA Triton Inference Server DALI backend

Timeline

2026-05-20: disclosed: Initial NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.