Cyber Posture

CVE-2025-33238

High

Published: 24 March 2026

Published
24 March 2026
Modified
31 March 2026
KEV Added
Patch
CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0005 14.3th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-33238 is a high-severity Race Condition (CWE-362) vulnerability in Nvidia Triton Inference Server. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 14.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploit Public-Facing Application (T1190) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Remediating the race condition flaw in NVIDIA Triton Inference Server via timely patching directly prevents remote attackers from triggering exceptions that cause denial of service.

prevent

Denial-of-service protection mechanisms limit the effects of exception-triggering requests on the Sagemaker HTTP server availability.

prevent

Robust error handling prevents exceptions from race conditions in the HTTP server from escalating to full denial of service.

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Remote unauthenticated exploitation of public-facing HTTP server component (T1190) directly causes application DoS via triggered exception from race condition (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service.

Deeper analysisAI

CVE-2025-33238 is a vulnerability in the Sagemaker HTTP server component of NVIDIA Triton Inference Server, where an attacker can trigger an exception. Published on 2026-03-24, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity primarily due to its impact on availability. The issue is associated with CWE-362 (race condition) and lacks additional CWE details from NVD.

A remote, unauthenticated attacker can exploit this vulnerability over the network with low attack complexity and no user interaction required. Successful exploitation leads to a denial of service condition by causing an exception that disrupts server availability, without compromising confidentiality or integrity.

Mitigation guidance and patch details are available in the official advisories, including the NVIDIA security bulletin at https://nvidia.custhelp.com/app/answers/detail/a_id/5790, the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2025-33238, and the CVE record at https://www.cve.org/CVERecord?id=CVE-2025-33238.

Details

CWE(s)

Affected Products

nvidia
triton inference server
≤ 26.01

CVEs Like This One

CVE-2025-33254Same product: Nvidia Triton Inference Server
CVE-2026-24158Same product: Nvidia Triton Inference Server
CVE-2026-24173Same product: Nvidia Triton Inference Server
CVE-2026-24175Same product: Nvidia Triton Inference Server
CVE-2025-23268Same product: Nvidia Triton Inference Server
CVE-2026-24146Same product: Nvidia Triton Inference Server
CVE-2026-24174Same product: Nvidia Triton Inference Server
CVE-2026-33009Shared CWE-362
CVE-2026-24164Same vendor: Nvidia
CVE-2026-24148Same vendor: Nvidia

References