CVE-2026-47472
published 2026-07-14CVE-2026-47472: NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.35%
27.2th percentile
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | tensorrt-llm | 0.0 – v1.3.0 rc16 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
NVIDIA TensorRT-LLM up to 1.3.0 Inter-Process Communication deserialization
vuldb·2026-07-15·CVSS 7.8
CVE-2026-47472 [HIGH] NVIDIA TensorRT-LLM up to 1.3.0 Inter-Process Communication deserialization
A vulnerability was found in NVIDIA TensorRT-LLM up to 1.3.0 and classified as very critical. The impacted element is an unknown function of the component Inter-Process Communication. Such manipulation leads to deserialization.
This vulnerability is documented as CVE-2026-47472. The attack needs to be performed locally. There is not any exploit available.
GHSA
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization.
ghsa_unreviewed·2026-07-14
CVE-2026-47472 [HIGH] CWE-502 NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization.
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published