ГлавнаяУязвимости → CVE-2025-23316
9.8критическая

CVE-2025-23316

Описание

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code execution by manipulating the model name parameter in the model control APIs. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, and data tampering.

Затрагиваемое ПО
Nvidia Triton inference serverLinux Linux kernelMicrosoft Windows
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://nvidia.custhelp.com/app/answers/detail/a_id/5691