An unsafe deserialization vulnerability in the NVIDIA TensorRT-LLM MPI server could allow a local attacker with high privileges to compromise system integrity.

The vulnerability is classified as CWE-502: Deserialization of Untrusted Data. It occurs in the MPI server component and requires high privileges (PR:H) and local access (AV:L), limiting the typical attack surface.

While the CVSS score is 7.5, the requirement for high privileges and local access reduces the immediate risk for many environments. However, successful exploitation could lead to full system compromise, as it allows for arbitrary code execution with the permissions of the MPI server process.

Immediate Action: Update NVIDIA TensorRT-LLM to version 1.2 or later as specified by the vendor's security advisory.

Proactive Monitoring: Monitor MPI server communications and execution logs for unexpected behavior or unauthorized process spawning.

Compensating Controls: Enforce strict access control policies on the local machine to ensure that only authorized users have the high-level privileges required to trigger this vulnerability.

Public Exploit Available: No

Although the prerequisites for exploitation are significant, the potential for a total system compromise warrants immediate patching. Organizations utilizing NVIDIA TensorRT-LLM should verify their current version and apply the update to version 1.2 to eliminate this deserialization risk.