CVE-2026-24233: High severity Nvidia TensorRT-LLM for Linux vulnerability
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24233?
CVE-2026-24233 has a severity rating of high with a score of 8.4.
How do I fix CVE-2026-24233?
To mitigate CVE-2026-24233, ensure that only trusted data is deserialized and regularly update to the latest version of NVIDIA TensorRT-LLM.
What is the risk associated with CVE-2026-24233?
The risk associated with CVE-2026-24233 is rated at 74, indicating a significant potential for exploitation.
Who is affected by CVE-2026-24233?
CVE-2026-24233 affects users of NVIDIA TensorRT-LLM for Linux due to vulnerabilities in the unpickler used for model weight deserialization.
What could happen if CVE-2026-24233 is exploited?
If exploited, CVE-2026-24233 could allow an unauthenticated attacker to execute code and escalate their privileges on the affected systems.