{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3anvidiatensorrt-llm/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nvidia:tensorrt-llm:*:*:*:*:*:*:*:*","cpe:2.3:a:nvidia:tensorrt_llm:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.4,"id":"CVE-2026-65119"},{"cvss":7.1,"id":"CVE-2026-24269"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["TensorRT-LLM"],"_cs_severities":["high"],"_cs_tags":["vulnerability","rce","nvidia","llm"],"_cs_type":"advisory","_cs_vendors":["NVIDIA"],"content_html":"\u003cp\u003eNVIDIA TensorRT-LLM is vulnerable to a flaw in the KvCacheAwareRouter tokenizer loading process. An attacker capable of influencing the input to this component can cause the application to include functionality from an untrusted control sphere. This vulnerability potentially allows for remote code execution, unauthorized information disclosure, data tampering, and denial of service. Specific patch details or firmware versions addressing this issue are not disclosed in the current NVD advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may lead to remote code execution (RCE) on the host environment, unauthorized access to sensitive information, modification of application data, and service interruption.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInventory all instances of TensorRT-LLM within the environment to assess exposure.\u003c/li\u003e\n\u003cli\u003eMonitor NVIDIA security bulletins for the release of patches addressing CVE-2026-65119.\u003c/li\u003e\n\u003cli\u003eRestrict access to tokenizer configuration files and model loading pipelines to trusted, authenticated users only.\u003c/li\u003e\n\u003cli\u003eIsolate systems running TensorRT-LLM from external or untrusted networks until a security update is applied.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-27T15:51:33Z","date_published":"2026-10-27T13:50:36Z","id":"https://feed.craftedsignal.io/briefs/2026-10-nvidia-tensorrt-llm-rce/","summary":"NVIDIA TensorRT-LLM contains an improper tokenizer loading vulnerability that could allow an attacker to achieve remote code execution, information disclosure, data tampering, or denial of service by influencing the control sphere.","title":"NVIDIA TensorRT-LLM: Remote code execution via tokenizer loading vulnerability (CVE-2026-65119)","url":"https://feed.craftedsignal.io/briefs/2026-10-nvidia-tensorrt-llm-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:nvidia:tensorrt-Llm:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}