AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-24229

Nvidia TensorRT-LLM: information disclosure

Nvidia

CVE-2026-24229 · Published Jul 14, 2026 · updated Jul 15, 2026

High7.3
No fix yet
Nvidia advisory

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

Affected versions

PackageAffectedFixed in
TensorRT-LLM
Product
>= 0.0, <= v1.3.0 rc16No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306

More Nvidia advisories

All Nvidia