Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover

wiz.io | vulnerability | CVE-2025-23319 | #ai-security | #rce | #vulnerability | #nvidia | #triton | #wiz-research | #cve-2025-23319

Summary

Wiz Research discloses a critical flaw chain in NVIDIA Triton Inference Server — CVE-2025-23319, 23320 and 23334 — enabling unauthenticated RCE and full server takeover; upgrade to 25.07.
Published
Collected

original ↗

Related coverage

  1. Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments (wiz.io)
  2. James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup (yeswehack.com)
  3. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  4. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  5. NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266) (wiz.io)
  6. LLM SecRange: Open-Source Penetration Testing Playground for Large Language Models & Vulnerable Agents (github.com)

back