CVE-2026-24227 is a medium severity (CVSS 5.3) deserialization of untrusted data flaw in NVIDIA TensorRT. Versions from v0 through v10.16.1 are affected, and NVIDIA lists v11.0 as the updated version. Update, and avoid loading serialized artifacts you do not trust.
What's affected
NVIDIA's July 2026 TensorRT bulletin lists TensorRT versions v0 through v10.16.1 as affected, with v11.0 as the updated version. The bulletin covers three other CVEs reported through a separate program, and all four are fixed in v11.0.
The CVSS vector is network based with no privileges and no user interaction, but only a low availability impact, which keeps the score at 5.3. The NVD description does mention code execution as a possible result.
How to check if you're exposed
Check the installed TensorRT version in each environment:
pip show tensorrt
For containers and system installs, check the package or image version too. Anything from v0 through v10.16.1 is in range.
For a quick look at your own dependencies, Safeguard's free in-browser dependency scan at https://gold.safeguard.sh/scan checks them against known CVEs in your browser.
What to do now
- Upgrade TensorRT to v11.0 or later, as NVIDIA's bulletin lists.
- Test your engines and plans after upgrading, since major versions can change serialized formats.
- Load serialized engine or model files only from sources you control.
- Rebuild images that bundle TensorRT.
Why it matters
The class is CWE-502. Deserializing untrusted data lets the data influence which objects are created, and that is a well known route to code execution. ML runtimes load many serialized files, so the pattern shows up often.
The medium score reflects the vector's low availability impact, and you should not read it as a promise that code execution is impossible. Because the fix is a major version, plan some testing time. The CVE is not in CISA's Known Exploited Vulnerabilities catalog.
Quick check
Why is the severity only medium?
The CVSS vector rates confidentiality and integrity impact as none and availability as low. The description still lists code execution.
What is the fixed version?
NVIDIA lists TensorRT v11.0.
Sources
Last reviewed: 19 October 2026.
