CVE-2025-23311CWE-121

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests

Critical · published August 6, 2025

CVSS v3.1
9.8
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

🚨 A specially crafted HTTP request is all it takes to launch a stack overflow in NVIDIA Triton Inference Server! 🔥 It's like giving a waiter a ridiculously large order they can't handle — eventually, the entire kitchen collapses due to the overwhelming demand. That’s precisely how this exploit can cause chaos in your server! An attacker could take control of the server, resulting in devastating outcomes like remote code execution, denial of service, or even data tampering. This means they could delete your data, leak sensitive information, or hijack your systems — yikes! The stakes are incredibly high, so securing your systems is paramount.

Put simply

It's like giving a waiter a ridiculously large order they can't handle — eventually, the entire kitchen collapses due to the overwhelming demand. That’s precisely how this exploit can cause chaos in your server! The vulnerability exists in NVIDIA Triton Inference Server and allows attackers to exploit a stack overflow via malformed HTTP requests, potentially leading to remote code execution and other severe impacts.

What to do

An attacker could take control of the server, resulting in devastating outcomes like remote code execution, denial of service, or even data tampering. This means they could delete your data, leak sensitive information, or hijack your systems — yikes! The stakes are incredibly high, so securing your systems is paramount. Immediate action is crucial! Update your NVIDIA Triton Inference Server to the latest version where this vulnerability is patched. Additionally, review your server configurations and enable strict input validation to mitigate potential exploitation. You've got this! 🦸 By following these steps, you’ll be on your way to securing your server in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02602 · 85.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-06T12:33Z
EPSS history
Timeline
  • 06 AUG 12:33Z
    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests
    cvelistv5