CRITICAL
NVDSUPPLY-CHAINCVE-2026-47481
2026-07-14
Authentication bypass on an inference server can enable code execution, privilege escalation, data theft, and tampering.
2026-07-14
Authenticated tenants could read or delete other tenants' workflow backups, exposing secrets and damaging integrity.
2026-07-14
Unauthenticated users can invoke MCP tools using the operator's API key, enabling license changes and deletions under the operator account.
2026-07-14
An authenticated tenant may access or delete another scope's workflow backups, exposing sensitive workflow data in multi-tenant mode.
MEDIUM
NVDSUPPLY-CHAINCVE-2026-47482
2026-07-14
A memory release flaw can let an attacker cause denial of service in the inference server.
MEDIUM
NVDSUPPLY-CHAINCVE-2026-47480
2026-07-14
A crafted request can crash Triton and disrupt model serving, causing denial of service.
MEDIUM
NVDSUPPLY-CHAINCVE-2026-47479
2026-07-14
Attackers can exhaust Triton server resources and disrupt model serving, causing denial of service.
MEDIUM
NVDSUPPLY-CHAINCVE-2026-47478
2026-07-14
A file descriptor handling flaw can let an attacker crash inference service availability.
MEDIUM
NVDSUPPLY-CHAINCVE-2026-47477
2026-07-14
A stack buffer overflow in Triton can crash inference services and disrupt model availability.
MEDIUM
NVDSUPPLY-CHAINCVE-2026-47476
2026-07-14
Attackers can exhaust server resources and cause inference outages or degraded availability.