NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution.
Fix
Public exploits 1
- s1ko/CVE-2026-47630 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · nvidiaNVD modified 2026-10-22 22:10
Affected (CPE criteria) 1
cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
References 3
- https://github.com/NVIDIA/product-security/tree/main/2026/5865 Patch
- https://nvd.nist.gov/vuln/detail/CVE-2026-47630 US Government Resource
- https://www.cve.org/CVERecord?id=CVE-2026-47630 Third Party Advisory