CVE-2026-65145

NeMo Agent Toolkit missing authentication can expose critical functions

NVIDIA · NeMo Agent Toolkit

First documented disclosure · Review checkpoint

Summary

NVIDIA reports a missing-authentication flaw that could permit remote code execution and other effects.

Severity and exploitation evidence

Critical · 10.0/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed primary sources document a vulnerability or controlled demonstration, not confirmed malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

A critical function lacks required authentication; the bulletin does not identify the specific endpoint.

Conditions required

The vendor vector describes network access without prior privileges or user interaction; configuration-specific details are not published.

Potential impact

Potential code execution, privilege escalation, data changes, service disruption and information disclosure.

Affected versions and configurations

1.0 through 1.8.0, all platforms.

Fix and mitigation status

1.9.0.

Practical next steps

Upgrade to 1.9.0 or later and restrict exposure of agent services.

Operating lesson

Agent tool endpoints need independently enforced authentication and authorization.

Evidence and limits

Initial vendor bulletin and CNA publication are October 27. CVSS 10.0 describes potential severity; it does not establish an active attack.

Sources