Description
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | TensorRT-LLM | 0.0 – ≤ v1.3.0 rc16 | — |