CVE-2026-47627 NVIDIA CVE debrief

Who should care

Organizations using NVIDIA Triton Inference Server for Linux should be aware of this critical vulnerability and take immediate action to patch or mitigate the risk. IT teams, security teams, and operators managing Linux systems with NVIDIA Triton Inference Server should prioritize patching and review system configurations to prevent potential denial of service attacks. Vulnerability management and security teams should also review and update their monitoring and detection capabilities to identify potential exploitation attempts.

Technical summary

CVE-2026-47627 is a critical vulnerability in NVIDIA Triton Inference Server for Linux, allowing an attacker to cause path traversal, potentially leading to denial of service. The vulnerability has a CVSS score of 9.8 and is classified as CWE-22. Affected systems should be identified and prioritized for remediation. Defenders should verify system configurations, monitor for suspicious activity, and review compensating controls. The vulnerability can be addressed by applying patches or updates provided by NVIDIA.

Defensive priority

Organizations using NVIDIA Triton Inference Server for Linux should prioritize patching to prevent potential denial of service attacks.

Recommended defensive actions

• Apply patches or updates provided by NVIDIA to address the path traversal vulnerability in Triton Inference Server for Linux.
• Implement compensating controls such as monitoring and access restrictions to mitigate potential denial of service attacks.
• Conduct inventory checks to identify and prioritize affected systems for remediation.

Evidence notes

The CVE-2026-47627 record indicates a critical vulnerability in NVIDIA Triton Inference Server for Linux, allowing for path traversal and potential denial of service. Evidence is based on official CVE and NVD records. Affected systems should be identified and prioritized for remediation. Defenders should verify system configurations, monitor for suspicious activity, and review compensating controls.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.