CVE-2026-65119: High severity vulnerability
NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access is required. The attack has low complexity and does not require privileges or user interaction.
Which deployments should be prioritized for investigation?
Prioritize systems using NVIDIA TensorRT-LLM where the KvCacheAwareRouter tokenizer-loading functionality is present. The issue is described as affecting any platform.
What is the potential impact if exploitation succeeds?
Successful exploitation may allow code execution, information disclosure, data tampering, and denial of service. The CVSS score is 8.4, rated high.