TE
Product
TensorRT-LLM
19
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 3High 9Medium 7Low 0
Watch
Add TensorRT-LLM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24234 | 6.8 | Jul 14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery Affected: 0.0 through v1.3.0 rc16 |
| CVE-2026-24259 | 6.4 | Jul 14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function Affected: 0.0 through v1.3.0 rc12 |
| CVE-2026-24220 | 6.4 | Jul 14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization Affected: 0.0 through v1.3.0 rc11 |
| CVE-2026-24226 | 6.3 | Jul 14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation Affected: 0.0 through v1.3.0 rc12 |
| CVE-2026-24271 | 6.2 | Jul 14 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling Affected: 0.0 through v1.3.0 rc14 |
| CVE-2026-47475 | 6.2 | Jul 14 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread Affected: 0.0 through v1.3.0 rc15 |
| CVE-2026-47470 | 6.2 | Jul 14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack Affected: 0.0 through v1.3.0 rc14 |
Showing 7
