Vulnerability · Published Sep 17, 2025 · Assigned by nvidia

CVE-2025-23316

Critical 9.8

In plain English

A critical-severity OS command injection in Triton Inference Server from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.7%top 45.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code execution by manipulating the model name parameter in the model control APIs. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, and data tampering.

Affected products (as reported)

Vendor	Product	Versions
NVIDIA	Triton Inference Server	All versions prior to 25.08

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5691