CVE-2026-65151

NeMo Agent Toolkit SQL injection affects database integrity and confidentiality

NVIDIA · NeMo Agent Toolkit

First documented disclosure · Review checkpoint

Summary

NVIDIA disclosed an SQL injection flaw in the agent toolkit.

Severity and exploitation evidence

High · 8.4/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed primary sources document a vulnerability or controlled demonstration, not confirmed malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Untrusted input can affect SQL operations; the bulletin does not identify the precise component.

Conditions required

The CNA vector specifies local access with no prior privileges or user interaction; a remote exploit path is not established.

Potential impact

Potential data tampering, denial of service and information disclosure.

Affected versions and configurations

1.4 through 1.6, all platforms.

Fix and mitigation status

1.7.0 for this flaw; 1.9.0 addresses both issues in the bulletin.

Practical next steps

Follow NVIDIA’s recommendation to upgrade to 1.9.0 or later; constrain database permissions.

Operating lesson

Treat database operations as privileged tools and use parameterized queries.

Evidence and limits

Initial disclosure October 27. Preserve the vendor’s LOCAL attack vector; do not substitute aggregator claims of remote exploitation.

Sources