Sploitus

Exploit for CVE-2026-47630

kitploit Β· 2026-08-31

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-S1KO-CVE-2026-47630
# CVE-2026-47630 β€” NVIDIA Triton Inference Server: arbitrary `dlopen` via `TRITON_BATCH_STRATEGY_PATH`

Absolute path traversal in the custom batching-strategy loader of `triton-inference-server/core`. A model configuration parameter is passed unvalidated to `dlopen(RTLD_NOW | RTLD_LOCAL)`, so anyone able to influence a model's `config.pbtxt` obtains native code execution inside the Triton server process at model-load time.