CVE-2025-23268

CRITICAL 9.8CVE-2025-23268 · Published 17/09/2025 · updated 17/06/2026

In short

CVE-2025-23268 is a CRITICAL (CVSS 9.8) vulnerability affecting triton inference server (nvidia).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.5% of all vulnerabilities.
Fix: update to 25.07 or later.

Package	Affected versions	Patched versions
triton inference server nvidia	`< 25.07`	`25.07`

Description

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution.

References

nvidia.custhelp.com/app/answers/detail/a_id/5691 · Vendor Advisory

More vulnerabilities in triton inference server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

triton inference server

nvidia

< 25.07

25.07

More vulnerabilities in triton inference server

See all →