CVE-2026-65119

Quick assessment

Affected

NVIDIA TensorRT-LLM

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NVIDIA TensorRT-LLM 在任何平台上均存在一个漏洞，该漏洞位于 KvCacheAwareRouter 的 tokenizer 加载过程中。攻击者可利用此漏洞，将来自不可信控制域的功能引入系统中。成功利用该漏洞可能导致代码执行、信息泄露、数据篡改以及拒绝服务。

CVSS 8.4 · High Updated Oct 27, 2026

Possible ATT&CK Techniques 3 AI

T1059.001 · PowerShell T1204.001 · Malicious Link T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

从非可信控制范围包含功能例程

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
NVIDIA	TensorRT-LLM	1.3.0rc24	-

II. Public POCs for CVE-2026-65119

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-65119

请登录查看更多情报信息。

Other References for CVE-2026-65119 (3)

https://www.cve.org/CVERecord?id=CVE-2026-65119

Same Patch Batch · NVIDIA · 2026-10-27 · 6 CVEs total

CVE-2026-65145	10.0 CRITICAL	NVIDIA NeMo Agent Toolkit 身份验证缺失漏洞
CVE-2026-65151	8.4 HIGH	NVIDIA NeMo Agent Toolkit 存在 SQL 注入漏洞
CVE-2026-47486	7.8 HIGH	NVIDIA PhysX 全平台越界写入漏洞
CVE-2026-65120	7.1 HIGH	NVIDIA TensorRT-LLM 服务器端请求伪造漏洞
CVE-2026-24269	7.1 HIGH	NVIDIA TensorRT-LLM 服务器端请求伪造漏洞

IV. Related Vulnerabilities

Same product: TensorRT-LLM

Same vendor: NVIDIA

Same weakness: CWE-829