NVIDIA TensorRT-LLM: three flaws fixed in 1.3.0rc25

01What happened

NVIDIA published security bulletin 5883 for TensorRT-LLM on October 27, 2026. The bulletin lists three CVEs and states that all were found externally. Aaron Portnoy of Mindgard reported CVE-2026-24269, and a researcher NVIDIA names as Mohammed reported CVE-2026-65119 and CVE-2026-65120.

02How it works

The highest-scored flaw, CVE-2026-65119, sits in KvCacheAwareRouter tokenizer loading. NVIDIA classes it as CWE-829, inclusion of functionality from an untrusted control sphere, meaning a tokenizer loaded from a source the operator does not control can bring code with it. NVIDIA says possible impacts include code execution, information disclosure, data tampering and denial of service. The other two are server-side request forgery, CWE-918, where an attacker steers a request that the server makes on its own behalf.

03Who is affected

TensorRT-LLM 1.3.0rc24 on all platforms is the only version NVIDIA lists as affected by the three CVEs. Deployments on a stable release or on a different release candidate fall outside the range NVIDIA published.

04What to do

Update TensorRT-LLM to 1.3.0rc25. NVIDIA recommends cloning or updating the software from the NVIDIA/TensorRT-LLM GitHub repository.

Questions people ask

Which TensorRT-LLM version fixes CVE-2026-65119?

TensorRT-LLM 1.3.0rc25 fixes CVE-2026-65119, together with CVE-2026-65120 and CVE-2026-24269. NVIDIA lists 1.3.0rc24 as the only affected version and recommends cloning or updating from the NVIDIA/TensorRT-LLM GitHub repository. NVIDIA scored CVE-2026-65119 at 8.4, the highest of the three in bulletin 5883.

Is NVIDIA TensorRT-LLM 1.3.0rc24 being exploited?

NVIDIA's bulletin 5883 gives no indication of exploitation for any of the three TensorRT-LLM CVEs. The bulletin says the issues were found externally and describes possible impacts rather than observed attacks. NVIDIA also notes that its risk assessment is an average across many systems and may not reflect the risk to a specific installation.

What does the KvCacheAwareRouter flaw allow?

CVE-2026-65119 affects tokenizer loading in the KvCacheAwareRouter component of NVIDIA TensorRT-LLM. NVIDIA describes the weakness as CWE-829, inclusion of functionality from an untrusted control sphere, and says possible impacts include code execution, information disclosure, data tampering and denial of service. NVIDIA publishes no proof of concept for the flaw.

Sources 4 links, all fetched

1. 1github.comNVIDIA Bulletin 5883
2. 2github.comGHSA CVE-2026-65119
3. 3github.comGHSA CVE-2026-65120
4. 4github.comGHSA CVE-2026-24269