A Vulnerability Chain Leading to AI Server Takeover in NVIDIA Triton