Cpe:2.3:a:nvidia:tensorrt_llm:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3anvidiatensorrt_llm/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 13:50:36 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNVIDIA TensorRT-LLM: Remote code execution via tokenizer loading vulnerability (CVE-2026-65119)https://feed.craftedsignal.io/briefs/2026-10-nvidia-tensorrt-llm-rce/Tue, 27 Oct 2026 13:50:36 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-nvidia-tensorrt-llm-rce/NVIDIA TensorRT-LLM contains an improper tokenizer loading vulnerability that could allow an attacker to achieve remote code execution, information disclosure, data tampering, or denial of service by influencing the control sphere.NVIDIA TensorRT-LLM is vulnerable to a flaw in the KvCacheAwareRouter tokenizer loading process. An attacker capable of influencing the input to this component can cause the application to include functionality from an untrusted control sphere. This vulnerability potentially allows for remote code execution, unauthorized information disclosure, data tampering, and denial of service. Specific patch details or firmware versions addressing this issue are not disclosed in the current NVD advisory.

Impact

Successful exploitation may lead to remote code execution (RCE) on the host environment, unauthorized access to sensitive information, modification of application data, and service interruption.

Recommendation

  1. Inventory all instances of TensorRT-LLM within the environment to assess exposure.
  2. Monitor NVIDIA security bulletins for the release of patches addressing CVE-2026-65119.
  3. Restrict access to tokenizer configuration files and model loading pipelines to trusted, authenticated users only.
  4. Isolate systems running TensorRT-LLM from external or untrusted networks until a security update is applied.
]]>highadvisoryvulnerabilityrcenvidiallm