CVE-2026-24269: SSRF
Published Oct 27, 2026
·Updated
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
Event History
Oct 27, 2026
CVE Published
via MITRE·12:15 PM
Data Sourced
via MITRE·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of attacker access is required to exploit this issue?
The CVSS vector indicates local attack access is required. It also indicates that no privileges and no user interaction are required.
2
Can the impact extend beyond the vulnerable component?
Yes. The CVSS vector marks scope as changed, indicating that a successful exploit can affect resources beyond the vulnerable component's security authority.