CVE-2025-23317CWE-122

NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP…

Critical · published August 6, 2025

CVSS v3.1
9.1
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

🚨 Just one crafty HTTP request is all it takes to turn NVIDIA Triton Inference Server into a hacker's playground! 🔥 Think of this vulnerability like a delivery driver who doesn’t check the package contents before dropping it off inside your house — if they bring in a hidden bomb, the consequences could be catastrophic! An attacker could gain full remote control, wreaking havoc by executing arbitrary code, tampering with data, or even shutting down services entirely! This isn’t just a minor inconvenience; it’s an all-access pass to chaos that could expose sensitive information and disrupt operations.

Put simply

Think of this vulnerability like a delivery driver who doesn’t check the package contents before dropping it off inside your house — if they bring in a hidden bomb, the consequences could be catastrophic! This vulnerability in the HTTP server allows an attacker to send a specially crafted request that can initiate a reverse shell, leading to remote code execution and potential denial of service.

What to do

An attacker could gain full remote control, wreaking havoc by executing arbitrary code, tampering with data, or even shutting down services entirely! This isn’t just a minor inconvenience; it’s an all-access pass to chaos that could expose sensitive information and disrupt operations. Immediately patch your NVIDIA Triton Inference Server to the latest version to close this vulnerability. Additionally, review server configurations and implement strict input validation to mitigate potential exploits. Don't forget to monitor your logs for unusual activity! You've got this! By taking action now, you'll keep your system secure and maintain that superhero status! 🦸

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02045 · 81.0th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-08-06T12:35Z
EPSS history
Timeline
  • 06 AUG 12:35Z
    NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP…
    cvelistv5