NVIDIA Triton Inference Server contains a vulnerability classified as CWE-248 (Uncaught Exception) where an attacker can cause a denial of service by sending a malformed request header. This vulnerability affects all versions prior to r26.02. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). No official fix or patch has been confirmed yet.

Successful exploitation of this vulnerability results in denial of service by crashing the Triton Inference Server. There is no impact on confidentiality or integrity reported. The server becomes unavailable to legitimate users until it is restarted or otherwise recovered.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, consider implementing network-level protections such as input validation proxies or rate limiting malformed requests to reduce exposure. Monitor for updates from NVIDIA regarding an official fix.