CVE-2026-24220

EUVD-2026-44462
NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.4 MEDIUM
LOCAL
HIGH
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 23.86%
Affected Products (NVD)
VendorProductVersion
nvidiatensorrt-llm
𝑥
≤ 1.3.0
nvidiatensorrt-llm
1.3.0:rc0
nvidiatensorrt-llm
1.3.0:rc1
nvidiatensorrt-llm
1.3.0:rc10
nvidiatensorrt-llm
1.3.0:rc11
nvidiatensorrt-llm
1.3.0:rc2
nvidiatensorrt-llm
1.3.0:rc3
nvidiatensorrt-llm
1.3.0:rc4
nvidiatensorrt-llm
1.3.0:rc5
nvidiatensorrt-llm
1.3.0:rc6
nvidiatensorrt-llm
1.3.0:rc7
nvidiatensorrt-llm
1.3.0:rc8
nvidiatensorrt-llm
1.3.0:rc9
𝑥
= Vulnerable software versions