Live › vulnerability › CVE-2026-24269
Go to dashboardNVIDIA TensorRT-LLM, a library for serving large language models, has a server-side request forgery flaw. An attacker who can send crafted requests can make the server fetch internal resources, which may expose information and allow data tampering.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Teams running NVIDIA TensorRT-LLM to serve models, especially where the server accepts requests that cause it to fetch URLs or resources. Exposure depends on whether the request path reaches the flawed code; the sources do not say which features are affected.
No product ranges from the sources yet.
pip show tensorrt_llm and compare it to the fixed release in NVIDIA's bulletintensorrt_llm to the patched version listed in NVIDIA's security bulletin (version not given in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
This page as .md · .json · in your agent: get_signal("CVE-2026-24269")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.