CVE-2026-24213 is a high severity (CVSS 8.0) out-of-bounds read in the DALI backend of NVIDIA Triton Inference Server. Versions before r26.03 are affected and r26.03 fixes it. Update the server image, and if you do not use DALI, confirm the backend is not loaded.
What's affected
NVIDIA's May 2026 Triton bulletin lists the Triton Inference Server DALI backend, all versions before r26.03, as affected. The updated version is r26.03. Two sibling DALI backend CVEs, CVE-2026-24214 and CVE-2026-24215, are fixed in the same release.
The CVSS vector is network based, low privileges and user interaction required. NVIDIA lists code execution, data tampering, denial of service and information disclosure as possible impacts.
How to check if you're exposed
List your Triton image tags:
docker images | grep tritonserver
A tag that starts with 26.03 or later is at or above the fix. Then check whether your model repository actually uses the DALI backend. Servers that never load DALI models have a smaller exposure, though the safe move is still to update.
For a quick look at your own dependencies, Safeguard's free in-browser dependency scan at https://gold.safeguard.sh/scan checks them against known CVEs in your browser.
What to do now
- Update Triton Inference Server to r26.03 or later.
- Redeploy every environment that pins an older image tag.
- Only load models and pipelines from sources you trust.
- If you do not use DALI, remove the backend from your images where you can.
Why it matters
The class is CWE-125, out-of-bounds read. The code reads memory past the end of a buffer, which can leak data or crash the process, and in some cases it helps lead to code execution. Parsing media and data pipelines is where this kind of bug often turns up.
The need for low privileges and user interaction lowers the likelihood, but the impact scores are high across the board. It is not in CISA's Known Exploited Vulnerabilities catalog.
Quick check
Is this the same bug as CVE-2026-24214?
No. They are separate DALI backend CVEs, one an out-of-bounds read and one an integer overflow, but the same release fixes both.
Do I need DALI installed to be affected?
The advisory scopes the flaw to the DALI backend, so check whether you use it. Updating is still the sound choice.
Sources
Last reviewed: 19 October 2026.
