# CVE-2026-24264: NVIDIA Triton Inference Server denial of service via data amplification

Source: https://junglewise.ai/threats/cve-2026-24264-nvidia-triton-inference-server-denial-of-service-via-data  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-01. Updated: 2026-07-01  
License: CC BY 4.0 with a link back

CVE-2026-24264 · Severity: high · CVSS 7.5 · Published 2026-07-01

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, is vulnerable to a denial-of-service attack. An attacker can send specially crafted, highly compressed data that the server fails to process correctly, potentially causing the service to crash or become unresponsive. This could disrupt AI-driven business operations and application availability.

Technologies: [Nvidia Triton Inference Server](https://junglewise.ai/threats/technologies/triton-inference-server). Vendors: [Nvidia](https://junglewise.ai/threats/vendors/nvidia).

## Quick answers

**Is CVE-2026-24264 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-24264 being exploited in the wild.

**How severe is CVE-2026-24264?** High severity, with a CVSS score of 7.5, published 1 July 2026.

**Which products and versions are affected?** Nvidia Triton Inference Server 0.0 - 26.03.

**Is there a fix for CVE-2026-24264?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-24264 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-24264?** Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

NVIDIA Triton Inference Server for Linux is vulnerable to a data amplification attack (CWE-409) due to improper handling of highly compressed data. A remote, unauthenticated attacker can exploit this by sending malicious payloads that expand significantly upon decompression, exhausting system resources. This vulnerability is reachable over the network with low attack complexity and no user interaction required. Successful exploitation results in a denial of service (DoS) affecting the availability of the inference server. The affected versions range from 0.0 to 26.03.

## Affected products

- NVIDIA Triton Inference Server 0.0 - 26.03

## Timeline

- 2026-07-01: disclosed
- 2026-07-01: advisory

## References

- [https://github.com/NVIDIA/product-security/tree/main/2026/5848](https://github.com/NVIDIA/product-security/tree/main/2026/5848)
- [https://www.cve.org/CVERecord?id=CVE-2026-24264](https://www.cve.org/CVERecord?id=CVE-2026-24264)

## Related threats

- [NVIDIA Triton Inference Server authorization bypass](https://junglewise.ai/threats/cve-2026-47625-nvidia-triton-inference-server-authorization-bypass)
- [NVIDIA Triton Inference Server excessive iteration denial of service](https://junglewise.ai/threats/cve-2026-16497-nvidia-triton-inference-server-excessive-iteration-denial-of)
- [NVIDIA Triton Inference Server path traversal](https://junglewise.ai/threats/cve-2026-47630-nvidia-triton-inference-server-path-traversal)
- [NVIDIA Triton Inference Server improper input validation](https://junglewise.ai/threats/cve-2026-47629-nvidia-triton-inference-server-improper-input-validation)
- [NVIDIA Triton Inference Server resource exhaustion denial of service](https://junglewise.ai/threats/cve-2026-47628-nvidia-triton-inference-server-resource-exhaustion-denial-of)