Live › vulnerability › CVE-2026-65120
Go to dashboardNVIDIA TensorRT-LLM, an LLM inference library, has a server-side request forgery flaw. An attacker can make the server send requests to destinations of their choosing, which may leak information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Teams that run TensorRT-LLM to serve models, especially where the server accepts requests that make it fetch URLs or external resources. The sources do not say which endpoints or configurations trigger the flaw. Teams not running TensorRT-LLM can skip it.
No product ranges from the sources yet.
pip show tensorrt_llm and compare it to the fixed release in NVIDIA's bulletin.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-65120")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.