CVE-2026-24220: tensorrt-llm through 1.3.0 (inclusive), 1.3.0 · update rc0, 1.3.0 · update rc1 (+10 more affected versions); +1 more…

Affected technology

tensorrt-llm · through 1.3.0 (inclusive)
nvidia

tensorrt-llm · 1.3.0 · update rc0
nvidia

tensorrt-llm · 1.3.0 · update rc1
nvidia

tensorrt-llm · 1.3.0 · update rc10
nvidia

tensorrt-llm · 1.3.0 · update rc11
nvidia

tensorrt-llm · 1.3.0 · update rc2
nvidia

tensorrt-llm · 1.3.0 · update rc3
nvidia

tensorrt-llm · 1.3.0 · update rc4
nvidia

tensorrt-llm · 1.3.0 · update rc5
nvidia

tensorrt-llm · 1.3.0 · update rc6
nvidia

tensorrt-llm · 1.3.0 · update rc7
nvidia

tensorrt-llm · 1.3.0 · update rc8
nvidia

tensorrt-llm · 1.3.0 · update rc9
nvidia

TensorRT-LLM · 0.0 through v1.3.0 rc11
NVIDIA

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. Vendor/CNA’s CVSS 3.1 assessment (base score 6.4/10) rates confidentiality, integrity and availability impact as high.