Improper Handling of Highly Compressed Data (Data Amplification) Affecting triton-inference-server/server package, versions [,2.68.0)


Severity

Recommended
0.0
high
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.72% (52nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-TRITONINFERENCESERVERSERVER-17879258
  • published7 Jul 2026
  • disclosed1 Jul 2026
  • creditNSK

Introduced: 1 Jul 2026

CVE-2026-24264  (opens in a new tab)
CWE-409  (opens in a new tab)

How to fix?

Upgrade triton-inference-server/server to version 2.68.0 or higher.

Overview

Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) via the improper handling of highly compressed data. An attacker can cause the application to become unresponsive or crash by submitting specially crafted compressed input.

CVSS Base Scores

version 4.0
version 3.1