PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover

wiz.io | vulnerability | CVE-2025-23319 | #ai-security | #rce | #vulnerability | #nvidia | #triton | #wiz-research | #cve-2025-23319
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Research discloses a critical flaw chain in NVIDIA Triton Inference Server — CVE-2025-23319, 23320 and 23334 — enabling unauthenticated RCE and full server takeover; upgrade to 25.07.
CVE
CVE-2025-23319
Published
Collected

Related coverage

vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
tool · wiz.io
NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)
Wiz Research details NVIDIAScape (CVE-2025-23266, CVSS 9.0): an OCI-hook misconfiguration in the NVIDIA Container Toolkit lets a three-line Dockerfile escape and gain root on shared AI hosts.
vulnerability · wiz.io
PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
Back