CVE-2026-24229 — NVIDIA / TensorRT-LLM

CVE-2026-24229

NVIDIA / TensorRT-LLM PUBLISHED

Description (CNA)

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

Affected (CNA)

Vendor / product	Versions
NVIDIA / TensorRT-LLM	affected 0.0 through v1.3.0 rc16

CWE

CWE-306

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24229
https://www.cve.org/CVERecord?id=CVE-2026-24229

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.