Security Advisory

NVIDIA (Triton Inference Server) Product Security Update Recommendation for August 2026

  • Aug 18 2026
NVIDIA (Triton Inference Server) Product Security Update Recommendation for August 2026

Overview

NVIDIA has released a security update to address a vulnerability discovered in its products. The affected products are Cumulus Linux, NVOS for GB300, NVOS for IBSwitch XDR, and Triton Inference Server for Linux.

Resolved Vulnerabilities

  • A high-severity privilege escalation vulnerability caused by improper privilege management was identified in Cumulus Linux. The identifier for this vulnerability is CVE-2026-24183.
  • A code execution vulnerability rated as “High” was identified in Cumulus Linux due to a buffer overflow in the processing of LLDP (a protocol for exchanging link status information between network devices) frames. The identifier is CVE-2026-24184.
  • A high-severity privilege escalation vulnerability has been identified in NVOS due to a configuration error in the SSH server authentication path. The identifier is CVE-2026-24185.
  • A critical-rated denial-of-service vulnerability caused by path traversal has been identified in Triton Inference Server. The identifier is CVE-2026-47627.
  • A high-severity denial-of-service vulnerability caused by unrestricted resource allocation has been identified in Triton Inference Server. The identifier is CVE-2026-47628.
  • A high-severity denial-of-service vulnerability caused by inadequate input validation has been identified in the Triton Inference Server. The identifier is CVE-2026-47629.
  • A medium-severity code execution and information disclosure vulnerability caused by absolute path traversal has been identified in the Triton Inference Server. The identifier is CVE-2026-47606.
  • A medium-severity code execution vulnerability caused by absolute path traversal has been identified in the Triton Inference Server. The identifier is CVE-2026-47630.

Patch Information

Patches for each product were released via the August 18, 2026 update. The versions provided are Cumulus Linux 5.16, Cumulus Linux LTS 5.11.5, Cumulus Linux LTS 5.9.5, NVOS for GB300 25.0.2.4438, NVOS for IBSwitch XDR 25.0.2.6077, And Triton Inference Server 26.06.

Note

Details are provided in the “Security Updates” sections of the NVIDIA Cumulus Linux and NVOS – August 2026 document and the NVIDIA Triton Inference Server – August 2026 document.
Previous Post

Next Post