Is CVE-2026-24266 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-24266 being exploited in the wild.

How severe is CVE-2026-24266?

Medium severity, with a CVSS score of 5.9, published 1 July 2026.

Which products and versions are affected?

Nvidia Triton Inference Server 0.0 - 26.03.

Is there a fix for CVE-2026-24266?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-24266 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-24266?

Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-24266: NVIDIA Triton Inference Server use-after-free in Linux version

CVE-2026-24266 · Severity: medium · CVSS 5.9 · Published 2026-07-01

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, is affected by a memory management flaw. An attacker could exploit this vulnerability to cause the server to crash or become unresponsive. This would disrupt AI-driven services and applications that rely on the server for real-time data processing.

Technologies: Nvidia Triton Inference Server. Vendors: Nvidia.

Quick answers

Is CVE-2026-24266 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-24266 being exploited in the wild.
How severe is CVE-2026-24266?: Medium severity, with a CVSS score of 5.9, published 1 July 2026.
Which products and versions are affected?: Nvidia Triton Inference Server 0.0 - 26.03.
Is there a fix for CVE-2026-24266?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-24266 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-24266?: Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A use-after-free (UAF) vulnerability exists in the NVIDIA Triton Inference Server for Linux (versions 0.0 through 26.03). The flaw is triggered when the application continues to use a pointer after it has been freed, potentially leading to memory corruption. An unauthenticated attacker can exploit this over the network, though the attack complexity is rated as high. Successful exploitation results in a denial of service (DoS) condition, impacting the availability of the inference service. The vulnerability is tracked as CWE-416.

Affected products

NVIDIA Triton Inference Server 0.0 - 26.03

Timeline

2026-07-01: disclosed
2026-07-01: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.