NVIDIA TensorRT-LLM Python Executor Data Validation Vulnerability Allowing Code Execution

A vulnerability exists in the Python executor of NVIDIA TensorRT-LLM on all platforms, prior to version 0.18.2. This issue allows an attacker with local access to the TRTLLM server to cause a data validation problem, which could be exploited to execute code, disclose information, and tamper with data.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution, information disclosure, and data manipulation.

Remediation

Users are advised to upgrade to version 0.18.2 or later. Instructions for downloading the latest release are available on the NVIDIA TensorRT GitHub releases page.