CVE-2026-47630 PUBLISHED

Assigner: nvidia
Reserved: 19.05.2026 Published: 18.08.2026 Updated: 18.08.2026

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 5.5

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	NVIDIA
Product	Triton Inference Server
Versions	Default: unaffected Version 0.0-26.05 is affected

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47630
https://www.cve.org/CVERecord?id=CVE-2026-47630
https://github.com/NVIDIA/product-security/tree/main/2026/5865

Problem Types

CWE-36 Absolute Path Traversal CWE

Impacts

code execution