CVE-2026-47487 is a CWE-22 path traversal vulnerability in the NVIDIA Triton Inference Server for Linux. It occurs when a user supplies a crafted path in the model name to the Triton MLflow plugin, enabling unauthorized access to files outside the model repository. This can lead to denial of service and information disclosure. The vulnerability requires local access with low privileges and no user interaction. The CVSS 3.1 base score is 4.4 (AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L). There is no vendor advisory or patch information available at this time.

An attacker with local low-level privileges can exploit this vulnerability to read, write, or modify files outside the intended directory, potentially causing denial of service and limited information disclosure. The impact is limited by the requirement for local access and low privileges, and no integrity impact is indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users and monitor for suspicious activity related to the Triton MLflow plugin. Avoid running the Triton Inference Server with unnecessary privileges.