NVIDIA Triton Inference Server Information Disclosure Vulnerability

A vulnerability exists in NVIDIA Triton Inference Server, where an attacker can cause information disclosure by uploading a model configuration. This vulnerability, present in all versions prior to r26.02, may also lead to a denial-of-service condition.

Impact

Exploitation of this vulnerability can result in unauthorized information disclosure or a denial-of-service condition, causing the server to become unresponsive or unavailable.

Remediation

Users are advised to update to NVIDIA Triton Inference Server version r26.02 or later. The updated version can be downloaded from the NVIDIA Triton Inference Server GitHub repository.