CVE Feed

    Dashboard / CVE / CVE-2026-24233

    CVE-2026-24233

    NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

    Published:Jul 14, 2026
    Last Modified:Aug 1, 2026
    EPS:Jul 14, 2026
    EPSS Score:0.00263
    CVSS Score:8.4

    Affected Products

    Vendor
    Nvidia
    Product
    Tensorrt-llm

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-586 Object Injection

    Related CVEs

    CVE-2026-24271 (CVSS 6.2) — NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could c…
    CVE-2026-47475 (CVSS 6.2) — NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could tr…
    CVE-2026-47470 (CVSS 6.2) — NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an a…
    CVE-2026-24226 (CVSS 6.3) — NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code …
    CVE-2026-24259 (CVSS 6.4) — NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication fo…
    CVE-2026-24220 (CVSS 6.4) — NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could ca…
    CVE-2026-24234 (CVSS 6.8) — NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a net…
    CVE-2026-24229 (CVSS 7.3) — NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an a…
    CVE-2026-47473 (CVSS 7.4) — NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A suc…
    CVE-2026-47471 (CVSS 7.5) — NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker cou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High