Severity
High
Analysis Summary
CVE-2025-23254
NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering.
Impact
- Information Disclosure
- Data Manipulation
- Code Execution
Indicators of Compromise
CVE
CVE-2025-23254
Affected Vendors
- NVIDIA
Affected Products
- NVIDIA TensorRT-LLM - 0.18.2
Remediation
Refer to NVIDIA Security Advisory for patch, upgrade or suggested workaround information.