CVE-2026-24234

Published: Jul 14, 2026Modified: Jul 15, 2026Deferred

6.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Exploitability: 2.5 / Impact: 3.7

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

https://nvd.nist.gov/vuln/detail/CVE-2026-24234

Source: psirt@nvidia.com

https://www.cve.org/CVERecord?id=CVE-2026-24234

Source: psirt@nvidia.com

Timeline

No history available yet.