CyberRota Analysis
AI-GeneratedThe NVIDIA Triton Inference Server for Linux is vulnerable due to improper handling of file paths in the MLflow plugin, allowing users to read, write, or modify files outside the designated model repository. Exploiting this vulnerability could result in denial of service and potential information disclosure. Organizations utilizing the Triton Inference Server should prioritize patching this issue to mitigate associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of service and information disclosure.