CVE-2026-47629: 
Triton Inference Server vulnerability analysis and mitigation

CVE-2026-47629 is an improper input validation vulnerability in NVIDIA Triton Inference Server for Linux that can be exploited by a remote attacker to cause denial of service. It was published on August 18, 2026, as part of NVIDIA's Security Bulletin 5865. The affected version is listed as 0.0-26.05, with all other versions defaulting to unaffected status. It carries a CVSS v3.1 base score of 7.5 (High), assigned by NVIDIA Corporation (NVIDIA Advisory).

The vulnerability is classified under CWE-20 (Improper Input Validation), meaning the server fails to adequately validate attacker-supplied input before processing it. The attack vector is network-based, requires no authentication, no user interaction, and low attack complexity, making it straightforward to trigger remotely. The specific input handling flaw and the precise endpoint or protocol affected have not been publicly detailed beyond the official advisory at the time of disclosure (NVIDIA Advisory).

Successful exploitation of this vulnerability results in a denial of service condition on the affected NVIDIA Triton Inference Server instance. There is no reported impact on confidentiality or integrity — the vulnerability is limited to availability. Given that Triton Inference Server is commonly used in AI/ML inference pipelines, a successful attack could disrupt model serving operations and downstream applications dependent on the server (NVIDIA Advisory).

According to CISA's SSVC assessment, exploitation of this vulnerability has been rated as "none" (no known in-the-wild exploitation) as of the disclosure date, though the attack is classified as "automatable" due to its network-accessible, no-authentication-required nature. No public proof-of-concept exploit code has been identified. The EPSS score is 0.0, indicating a very low probability of exploitation in the near term. The vulnerability is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog (NVIDIA Advisory).

NVIDIA has published Security Bulletin 5865 addressing this vulnerability. Users should consult the official bulletin at the NVIDIA product-security GitHub repository for patched version information and any available workarounds. The affected version is identified as 0.0-26.05; upgrading to a version released after this bulletin is the recommended remediation. Organizations running Triton Inference Server on Linux should prioritize reviewing the bulletin and applying available updates (NVIDIA Advisory).

The vulnerability received routine coverage from automated vulnerability tracking services such as VulDB and CVEFeed shortly after disclosure. Social media mentions were observed on Mastodon and Bluesky via CVE notification bots, with no notable researcher commentary or in-depth analysis published at the time of this report (NVIDIA Advisory).