TE
Product
TensorRT-LLM
19
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 3High 9Medium 7Low 0
Watch
Add TensorRT-LLM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65119 New | 8.4 | Oct 27 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted… Affected: 1.3.0rc24 |
| CVE-2026-24233 | 8.4 | Jul 14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause… Affected: 0.0 through v1.3.0 rc14 |
| CVE-2026-47472 | 7.8 | Jul 14 | NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization Affected: 0.0 through v1.3.0 rc16 |
| CVE-2026-47471 | 7.5 | Jul 14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow Affected: 0.0 through v1.3.0 rc16 |
| CVE-2026-24160 | 7.5 | May 20 | NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference Affected: before v1.2 |
| CVE-2026-47473 | 7.4 | Jul 14 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition Affected: 0.0 through v1.3.0 rc16 |
| CVE-2026-24229 | 7.3 | Jul 14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by… Affected: 0.0 through v1.3.0 rc16 |
| CVE-2026-65120 New | 7.1 | Oct 27 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery Affected: 1.3.0rc24 |
| CVE-2026-24269 New | 7.1 | Oct 27 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery Affected: 1.3.0rc24 |
Showing 9
