by Kastro
Paper/Archive/CVE-2026-65145

CVE-2026-65145

NVIDIA NeMo Agent Toolkit — NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue.

EPSS 0.5%CVSS 10.0
critical.is priorityof 100
39
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 44.5.445 × 208.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Affected

ProductAffectedFixed inSource
NeMo Agent Toolkit1.0 to 1.8.0–CNA

Scores by source

nvidia (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refnvd.nist.gov/vuln/detail/CVE-2026-65145refcve.org/CVERecord?id=CVE-2026-65145refgithub.com/NVIDIA/product-security/tree/main/2026/5912