CVE-2026-47487
published 2026-08-04CVE-2026-47487: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or…
PriorityP432high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.23%
13.6th percentile
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | triton_inference_server | <= 26.02 | — |
| nvidia | triton_inference_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name
ghsa_unreviewed·2026-08-04
CVE-2026-47487 [MEDIUM] CWE-22 NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
VulDB
NVIDIA Triton Inference Server MLflow plugin path traversal
vuldb·2026-08-04·CVSS 4.4
CVE-2026-47487 [MEDIUM] NVIDIA Triton Inference Server MLflow plugin path traversal
A vulnerability described as very critical has been identified in NVIDIA Triton Inference Server. The affected element is an unknown function of the component MLflow plugin. The manipulation results in path traversal.
This vulnerability was named CVE-2026-47487. The attack may be performed from remote. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published