Live › vulnerability › CVE-2026-65119
Go to dashboardNVIDIA TensorRT-LLM loads a tokenizer in its KvCacheAwareRouter from a source an attacker can influence, pulling in code from an untrusted control sphere. A successful exploit can lead to code execution, information disclosure, data tampering, or denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Teams running NVIDIA TensorRT-LLM with the KvCacheAwareRouter on any platform, especially where tokenizer or model files come from outside sources. The sources do not say which router configurations are exposed, so teams that do not use the KvCacheAwareRouter can likely skip it, but this is unconfirmed.
No product ranges from the sources yet.
pip show tensorrt_llm and compare it to the fixed version in the NVIDIA advisory.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-65119")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.