CVE-2026-24220: Medium severity Nvidia TensorRT-LLM vulnerability
Published Jul 14, 2026
·Updated
NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
Affected Software
14 affected components
Nvidia TensorRT-LLM
Nvidia TensorRT-LLM<=1.3.0
Nvidia TensorRT-LLM=1.3.0-rc0
Nvidia TensorRT-LLM=1.3.0-rc1
Nvidia TensorRT-LLM=1.3.0-rc10
Nvidia TensorRT-LLM=1.3.0-rc11
Nvidia TensorRT-LLM=1.3.0-rc2
Nvidia TensorRT-LLM=1.3.0-rc3
Nvidia TensorRT-LLM=1.3.0-rc4
Nvidia TensorRT-LLM=1.3.0-rc5
Nvidia TensorRT-LLM=1.3.0-rc6
Nvidia TensorRT-LLM=1.3.0-rc7
Nvidia TensorRT-LLM=1.3.0-rc8
Nvidia TensorRT-LLM=1.3.0-rc9
Event History
Jul 14, 2026
CVE Published
via MITRE·08:05 PM
Data Sourced
via MITRE·08:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-24220?
CVE-2026-24220 has a medium severity score of 6.4.
2
How do I fix CVE-2026-24220?
To fix CVE-2026-24220, update to the latest version of NVIDIA TensorRT-LLM that addresses the vulnerability.
3
What systems are affected by CVE-2026-24220?
CVE-2026-24220 affects the NVIDIA TensorRT-LLM across all platforms.
4
What could be the impact of exploiting CVE-2026-24220?
Exploiting CVE-2026-24220 could lead to unauthorized code execution.
5
What is the nature of the vulnerability in CVE-2026-24220?
CVE-2026-24220 involves unsafe deserialization due to unauthorized zeroMQ deserialization in NVIDIA TensorRT-LLM.