CVE-2025-23268

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5691	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*

History

17 Jun 2026, 08:53

Type	Values Removed	Values Added
Summary		(es) NVIDIA Triton Inference Server contiene una vulnerabilidad en el backend de DALI donde un atacante puede causar un problema de validación de entrada incorrecta. Un exploit exitoso de esta vulnerabilidad puede llevar a la ejecución de código.

08 Oct 2025, 17:13

Type	Values Removed	Values Added
References	~~() https://nvidia.custhelp.com/app/answers/detail/a_id/5691 -~~	() https://nvidia.custhelp.com/app/answers/detail/a_id/5691 - Vendor Advisory
First Time		Nvidia Nvidia triton Inference Server
CPE		cpe:2.3:a:nvidia:triton_inference_server::::::::

17 Sep 2025, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-17 22:15

Updated : 2026-06-17 08:53

NVD link : CVE-2025-23268

Mitre link : CVE-2025-23268

CVE.ORG link : CVE-2025-23268

JSON object : View

Products Affected

nvidia

triton_inference_server

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2025-23268", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-23268", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-18T13:30:04.947253Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "Triton Inference Server", "versions": [{"status": "affected", "version": "All versions prior to 25.07"}], "platforms": ["DALI Backend"], "defaultStatus": "unaffected"}]}], "published": "2025-09-17T22:15:37.080", "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5691", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution."}, {"lang": "es", "value": "NVIDIA Triton Inference Server contiene una vulnerabilidad en el backend de DALI donde un atacante puede causar un problema de validaci\u00f3n de entrada incorrecta. Un exploit exitoso de esta vulnerabilidad puede llevar a la ejecuci\u00f3n de c\u00f3digo."}], "lastModified": "2026-06-17T08:53:03.990", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2168003B-4C9F-4733-89F5-EA17B1228F95", "versionEndExcluding": "25.07"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}