CVE-2026-24234 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in th… | CVSS 6.8 MEDIUM

Description

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

Metadata

CVE ID: CVE-2026-24234
State: PUBLISHED
Assigner: nvidia
Reserved: 2026-01-21 19:09 UTC
Published: 2026-07-14 20:04 UTC
Last updated: 2026-07-14 20:04 UTC
Primary CWE: CWE-918
CWE-918 Server-Side Request Forgery (SSRF)
Vendor / Product: NVIDIA / TensorRT-LLM
Sources: cve.org · NVD

Severity & Metrics

6.8 MEDIUM CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Affected products (1)

Vendor	Product	Platform	Versions
NVIDIA	TensorRT-LLM	—	0.0 ≤ v1.3.0 rc16

Weakness (CWE)

CWE	Source	Description
CWE-918	cna	CWE-918 Server-Side Request Forgery (SSRF)

CVSS scores (1)

Score	Severity	Version	Source	Vector
6.8	MEDIUM	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

References (2)