CVE-2026-65119
NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusi
CVSS
8.4
Alta
EPSS
0.2%
p5
KEV
—
Exploit Today
2
0-100
Publicado: 27 de out. de 2026 · Última mod.: 4 de nov. de 2026 · CWE-829
0.2%EPSS · 30 dias0.2%
2026-10-282026-11-07
NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1238584.4 MÉD4.0%
——1In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects2dCVE-2026-1238545.5 MÉD6.3%
——2In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module13hCVE-2026-1238537.8 ALT6.8%
——2In JetBrains IntelliJ IDEA before 2026.3,
2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process1dCVE-2026-1238497.0 ALT3.8%
——1In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers1dCVE-2026-1238433.3 BAI3.9%
——1In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration2dCVE-2026-1238387.8 ALT6.8%
——2In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file1d