CVE-2026-24229

Description

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

PUBLISHED Reserved 2026-01-21 | Published 2026-07-14 | Updated 2026-07-14 | Assigner nvidia

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

References

nvd.nist.gov/vuln/detail/CVE-2026-24229

www.cve.org/CVERecord?id=CVE-2026-24229

cve.org (CVE-2026-24229)

nvd.nist.gov (CVE-2026-24229)

Download JSON