Skip to content
OpenAdvisories
High · 8.8 CVE-2025-23254 EUVD-2025-13062GHSA-4485-mg4q-xjgv

NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by loc…

Published May 1, 2025 · Updated May 1, 2025 · Assigned by nvidia

Description

NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA TensorRT-LLM All versions prior to 0.18.2 —

References