Live › vulnerability › CVE-2026-65145
Go to dashboardNVIDIA NeMo Agent Toolkit, a framework for building AI agents, has a missing authentication check that lets an attacker reach functions they should not. The advisory says the flaw could lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Teams running NVIDIA NeMo Agent Toolkit to build or host agents, especially where the service accepts requests over a network. The sources do not say which deployment modes or versions are vulnerable, so treat any running instance as potentially exposed until checked. Teams not using NeMo Agent Toolkit can skip this.
No product ranges from the sources yet.
pip show nvidia-nat (the package name is not confirmed by the sources; verify before relying on it)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-65145")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.