CVE-2026-24226 is a vulnerability in NVIDIA TensorRT-LLM for Linux where an attacker could cause improper control of code generation by leveraging functionality from an untrusted control sphere (CWE-829). This flaw could allow an attacker with high privileges and user interaction to execute arbitrary code, tamper with data, and disclose sensitive information. The CVSS vector indicates the attack requires local access with high complexity and privileges, and user interaction. No known exploits in the wild or vendor-provided patches are currently documented.

Successful exploitation may result in high impact on confidentiality, integrity, and availability, including code execution, data tampering, and information disclosure. The attack requires local access with high privileges and user interaction, limiting remote exploitation scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is currently documented. Users should monitor NVIDIA advisories for updates and consider restricting access to affected systems to trusted users with appropriate privileges until a fix is available.