Is CVE-2026-47478 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-47478 being exploited in the wild.

How severe is CVE-2026-47478?

High severity, with a CVSS score of 7.5, published 14 July 2026.

Which products and versions are affected?

Nvidia Triton Inference Server versions up to and including 26.04.

Is there a fix for CVE-2026-47478?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-47478 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-47478?

Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47478: NVIDIA Triton Inference Server use of expired file descriptor

CVE-2026-47478 · Severity: high · CVSS 7.5 · Published 2026-07-14

NVIDIA Triton Inference Server, a platform used to deploy and manage AI models in production, is vulnerable to a flaw that can cause the service to crash. An attacker can exploit this issue remotely without needing any special permissions or user interaction. If successful, this would result in a denial of service, preventing legitimate users and applications from accessing AI inference capabilities.

Technologies: Nvidia Triton Inference Server. Vendors: Nvidia.

Quick answers

Is CVE-2026-47478 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-47478 being exploited in the wild.
How severe is CVE-2026-47478?: High severity, with a CVSS score of 7.5, published 14 July 2026.
Which products and versions are affected?: Nvidia Triton Inference Server versions up to and including 26.04.
Is there a fix for CVE-2026-47478?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-47478 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-47478?: Check whether you run Nvidia Triton Inference Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in NVIDIA Triton Inference Server for Linux (CWE-910) involving the use of an expired file descriptor. The flaw can be triggered by a remote, unauthenticated attacker over the network with low attack complexity. Successful exploitation leads to a denial of service (DoS) condition by causing the server to reference a file descriptor that is no longer valid or has been closed. The vulnerability affects versions up to and including 26.04.

Affected products

NVIDIA Triton Inference Server versions up to and including 26.04

Timeline

2026-07-14: disclosed: Initial publication of the CVE record.

References

https://www.cve.org/CVERecord?id=CVE-2026-47478

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.