NVIDIA Discloses Critical Triton Authentication Bypass Vulnerability

NVIDIA disclosed a critical authentication-bypass vulnerability in its Triton Inference Server, tracked as CVE-2026-24207, with a CVSS 3.1 base score of 9.8 (critical), according to GBHackers and NVIDIA's May 2026 security bulletin. This was independently confirmed via NVD, which lists NVIDIA as the CNA and records the same 9.8 score and vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw is classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel) and is exploitable remotely, without authentication or user interaction; successful exploitation could lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure. NVD's affected-configuration data confirms all Triton Inference Server versions before r26.03 are impacted, and NVIDIA has released r26.03 as the fix. The same bulletin also discloses CVE-2026-24206, a related authentication-bypass flaw (also CWE-288, same affected versions) that NVIDIA's own CNA scored lower, at 7.3 HIGH, because it lacks the code-execution impact; notably, NVD's own independent assessment scores CVE-2026-24206 at 9.8 as well, a discrepancy between NIST's and NVIDIA's severity ratings. Other security outlets, including securityonline.info and cyberpress.org, report the same bulletin covers several additional related CVEs affecting Triton and DALI Backend components, all addressed in r26.03.

The vulnerability stems from improper authentication controls in Triton, according to GBHackers' review of NVIDIA's bulletin, allowing attackers to circumvent authentication mechanisms via the CWE-288 pathway. Inference servers like Triton sit at a high-value point in production AI stacks: they receive networked requests, execute model code paths, and often host or access proprietary model artifacts and sensitive data, so an unauthenticated remote-code-execution path on this infrastructure carries outsized risk for GPU-accelerated inference deployments in cloud and edge environments.

Update Triton Inference Server (and the DALI Backend, if deployed) to r26.03 or later immediately; this single release addresses CVE-2026-24207 alongside the related CVE-2026-24206 and other CVEs disclosed in the same bulletin, so a partial or selective patch is not sufficient. In the interim, or for systems that cannot be patched immediately, restrict network access to inference endpoints with allowlists, place servers behind authentication proxies, and monitor for unusual requests to inference endpoints or unexpected process launches tied to Triton.

• •The official NVIDIA security bulletin and Triton GitHub repository for any updates to the affected-CVE list or fix guidance.
• •Public proof-of-concept exploit disclosures on vulnerability feeds, given the low exploitation complexity.
• •Whether NVD's own CVSS enrichment (currently marked "not yet provided" for CVE-2026-24207 itself) converges with or diverges from NVIDIA's CNA scoring, as it already has for the companion CVE-2026-24206.