CVE-2026-24206 is a high severity (CVSS 7.3) authentication bypass in NVIDIA Triton Inference Server on Linux. All versions before r26.03 are affected, and r26.03 fixes it. Update to r26.03 or later, and limit network access to the inference server until you have.
What's affected
NVIDIA's May 2026 Triton bulletin lists all versions of Triton Inference Server on Linux before r26.03 as affected. The updated version is r26.03. The same bulletin covers several other Triton CVEs, so one upgrade closes the whole set.
The CVSS vector is network based with no privileges and no user interaction. The impacts are rated low for confidentiality, integrity and availability, which is how the 7.3 score comes out.
How to check if you're exposed
Triton usually ships as a container. List the tags you run:
docker images | grep tritonserver
NVIDIA tags releases by year and month, so a tag that starts with 26.03 or later is at or above the fix. Check Kubernetes manifests and Helm values too, because pinned image tags are easy to forget.
For a quick look at your own dependencies, Safeguard's free in-browser dependency scan at https://gold.safeguard.sh/scan checks them against known CVEs in your browser.
What to do now
- Move to Triton Inference Server r26.03 or later.
- Redeploy every environment that pins an older image tag, including staging.
- Do not expose the inference endpoints to untrusted networks. Put them behind your own authenticated gateway.
- Review logs for unexpected clients if the server was reachable from outside your network.
Why it matters
The weakness is CWE-288, authentication bypass using an alternate path or channel. The service offers a way in that skips the normal authentication check. NVIDIA lists privilege escalation, denial of service and information disclosure as possible impacts.
Inference servers often sit on internal networks with little protection because they are seen as plumbing. A network reachable flaw with no login needed changes that. The CVE is not in CISA's Known Exploited Vulnerabilities catalog.
Quick check
Which release fixes it?
NVIDIA lists r26.03 as the updated version for Triton Inference Server.
Is a login needed to reach the flaw?
No. The CVSS vector sets privileges required to none.
Sources
Last reviewed: 19 October 2026.
