CVE-2026-47472

NVIDIA TensorRT-LLM contains a server-side request forgery (SSRF) vulnerability that an attacker could exploit. Successful exploitation may lead to information disclosure.

NVIDIA TensorRT-LLM contains a vulnerability in KvCacheAwareRouter tokenizer loading that allows inclusion of functionality from an untrusted control sphere. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.

NVIDIA TensorRT-LLM contains a server-side request forgery (SSRF) vulnerability that an attacker could exploit. Successful exploitation may lead to information disclosure and data tampering.

A vulnerability in the NVIDIA TensorRT-LLM library has been found in the OpenAI-compatible inference API. An attacker can trigger a reachable assertion in the sampler thread, leading to denial of service.

NVIDIA TensorRT-LLM contains a vulnerability that could allow an attacker to trigger a write-what-where condition. Successful exploitation may lead to data tampering, denial of service, and information disclosure.

A vulnerability in NVIDIA TensorRT-LLM during tensor deserialization allows an attacker to trigger a heap-based buffer overflow. This could lead to information disclosure, data tampering, or denial of service.

NVIDIA TensorRT-LLM contains a vulnerability in the gRPC server chat API endpoint, allowing a local attacker to trigger CWE-20 (improper input validation). Successful exploitation could lead to denial of service (DoS).

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA TensorRT-LLM for Linux contains a vulnerability that could allow an attacker to bypass authentication for a critical function. Successful exploitation may lead to code execution, data tampering, and information disclosure.

A vulnerability in NVIDIA TensorRT-LLM for Linux exists in the multimodal media fetching functions, allowing a network-accessible attacker to perform server-side request forgery (SSRF). Successful exploitation could lead to denial of service and information disclosure.