Critical severity · published Oct 27, 2026
CVE-2026-65145
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue
New
10.0
CVSS
–
EPSS
No
On KEV
Description
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
NeMo Agent Toolkit · NVIDIA
1.0 to 1.8.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-65145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-65145
github.com
https://github.com/NVIDIA/product-security/tree/main/2026/5912
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-65145
www.cve.org
https://www.cve.org/CVERecord?id=CVE-2026-65145
More from NeMo Agent Toolkit
8.4
CVE-2026-65151
NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue