Downloads · 30 days
0
triton-server-crash-poc
Madhan-Alagarsamy/triton-server-crash-poc
triton-server-crash-poc is a machine learning model from Madhan-Alagarsamy. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This repository contains a malicious TensorRT engine file (model.plan) designed to demonstrate a Remote Denial of Service (DoS) vulnerability in the NVIDIA Triton Inference Server.
Access
Public
Updated Feb 1, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.plan2 KB · 46%
At a glance
- Access
- Public
- Created
- Feb 1, 2026
- Updated
- Feb 1, 2026
- SHA
- 1ae9f634
Model card
From the Hugging Face model README
Triton Inference Server DoS Proof-of-Concept (PoC)
This repository contains a malicious TensorRT engine file (model.plan) designed to demonstrate a Remote Denial of Service (DoS) vulnerability in the NVIDIA Triton Inference Server.
Vulnerability Overview
The vulnerability exists in the TensorRT backend of the Triton Inference Server. When the server attempts to deserialize a malformed engine file, it fails to properly validate the header metadata (specifically length-prefixed fields), leading to out-of-bounds memory access and a fatal process crash.
Files
model.plan: The malformed TensorRT engine file (Payload).
Steps to Reproduce
1. Requirements
Ensure you have the Triton client or TensorRT Python libraries installed:
pip install tensorrt tritonclient[all]
- Created
- Feb 1, 2026
- Updated
- Feb 1, 2026