High severity · published Oct 27, 2026
CVE-2026-65151
NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue
New
8.4
CVSS
–
EPSS
No
On KEV
Description
NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
NeMo Agent Toolkit · NVIDIA
1.4 to 1.6 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-65151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-65151
github.com
https://github.com/NVIDIA/product-security/tree/main/2026/5912
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-65151
www.cve.org
https://www.cve.org/CVERecord?id=CVE-2026-65151
More from NeMo Agent Toolkit
10.0
CVE-2026-65145
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue