CVE-2026-24142 PUBLISHED

Assigner: nvidia
Reserved: 21.01.2026 Published: 20.05.2026 Updated: 20.05.2026

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS Score: 6.3

Attack Vector	Local	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	Low
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	NVIDIA
Product	TensorRT-LLM
Versions	Default: unaffected affected from 0 to v1.2 (excl.)

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24142
https://www.cve.org/CVERecord?id=CVE-2026-24142
https://nvidia.custhelp.com/app/answers/detail/a_id/5805

Problem Types

CWE-502 Deserialization of Untrusted Data CWE

Impacts

Code execution, data tampering, information disclosure