AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65120

Nvidia TensorRT-LLM: server-side request forgery

Nvidia

CVE-2026-65120 · Published Oct 27, 2026

High7.1
No fix yet
Nvidia advisory

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

Affected versions

PackageAffectedFixed in
TensorRT-LLM
Product
<= 1.3.0rc24No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More Nvidia advisories

All Nvidia
High 8.4Oct 27Nvidia TensorRT-LLM: code executionCVE-2026-65119no fix yetCritical 10.0Oct 27Nvidia NeMo Agent Toolkit: missing authenticationCVE-2026-65145no fix yetHigh 8.4Oct 27Nvidia NeMo Agent Toolkit: SQL injectionCVE-2026-65151no fix yetHigh 7.1Oct 27Nvidia TensorRT-LLM: server-side request forgeryCVE-2026-24269no fix yetHigh 7.8Oct 27Nvidia PhysX: out-of-bounds writeCVE-2026-47486no fix yetMedium 5.5Sep 30Nvidia GeForce: missing authorizationCVE-2026-47604no fix yet