NVIDIA Triton Inference Server contains an authentication bypass vulnerability (CWE-288) identified as CVE-2026-24206. This vulnerability allows an attacker to circumvent authentication mechanisms by leveraging an alternate path or channel. Successful exploitation may lead to unauthorized privilege escalation, denial of service conditions, or leakage of sensitive information. The CVSS 3.1 base score is 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. The affected version is listed as '0', which likely indicates initial or unspecified versions. No patch or official remediation level has been published by NVIDIA as of the vulnerability disclosure date.

The vulnerability allows attackers to bypass authentication controls on the NVIDIA Triton Inference Server, potentially leading to unauthorized privilege escalation, denial of service, and information disclosure. This could compromise the confidentiality, integrity, and availability of the server and its hosted inference workloads. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, organizations should monitor NVIDIA communications for updates. Until a patch is available, consider restricting network access to the Triton Inference Server and applying compensating controls to limit exposure.