{"id":"CVE-2026-65145","kind":"vulnerability","aliases":["CVE-2026-65145"],"related":[],"title":"NVIDIA NeMo Agent Toolkit: missing authentication lets attackers run code","description":"NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.","summary":"NVIDIA NeMo Agent Toolkit, a framework for building AI agents, has a missing authentication check that lets an attacker reach functions they should not. The advisory says the flaw could lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure.","severity":"critical","cvss":10.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-agents","ai-tooling","nvidia-nemo-agent-toolkit","python","self-hosted"],"not_affected_if":["not-using-nemo-agent-toolkit"],"how_to_check":"- Check the installed NeMo Agent Toolkit version with `pip show nvidia-nat` (the package name is not confirmed by the sources; verify before relying on it)\n- Find running NeMo Agent Toolkit services and check whether they are reachable from untrusted networks; exact endpoints unknown","fix":"- Update NVIDIA NeMo Agent Toolkit to the patched version named in the NVIDIA advisory (version unknown from these sources)\n- Until patched, restrict network access to any NeMo Agent Toolkit service and do not expose it to the internet","status":"open","published_at":"2026-10-27T13:16:59+00:00","first_seen_at":"2026-10-27T13:31:51+00:00","triaged_at":"2026-10-27T13:32:11+00:00","updated_at":"2026-10-27T13:32:11+00:00","category":"ai-tooling","confidence":0.4,"triage":{"at":"2026-10-27T13:32:11Z","model":"claude-haiku-5-5","output":{"fix":"- Update NVIDIA NeMo Agent Toolkit to the patched version named in the NVIDIA advisory (version unknown from these sources)\n- Until patched, restrict network access to any NeMo Agent Toolkit service and do not expose it to the internet","reach":"unknown","title":"NVIDIA NeMo Agent Toolkit: missing authentication lets attackers run code","impact":"high","summary":"NVIDIA NeMo Agent Toolkit, a framework for building AI agents, has a missing authentication check that lets an attacker reach functions they should not. The advisory says the flaw could lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure.","category":"ai-tooling","nicknames":[],"who_cares":["nvidia-nemo-agent-toolkit","ai-agents","python","self-hosted"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Attacker may run code, escalate privileges, or read and tamper with data","analyst_note":"Find the NVIDIA security bulletin for CVE-2026-65145 to get affected and patched versions, the vulnerable endpoint, and whether authentication is needed; NVD summary alone is too thin.","how_to_check":"- Check the installed NeMo Agent Toolkit version with `pip show nvidia-nat` (the package name is not confirmed by the sources; verify before relying on it)\n- Find running NeMo Agent Toolkit services and check whether they are reachable from untrusted networks; exact endpoints unknown","needs_analyst":true,"not_affected_if":["not-using-nemo-agent-toolkit"],"who_is_affected":"Teams running NVIDIA NeMo Agent Toolkit to build or host agents, especially where the service accepts requests over a network. The sources do not say which deployment modes or versions are vulnerable, so treat any running instance as potentially exposed until checked. Teams not using NeMo Agent Toolkit can skip this.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.00069,"input_tokens":3304,"output_tokens":720,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-65145':13A,16A 'advisori':57B 'agent':3A,19B,26B,34B,41B,78C 'ai':18B,21B,40B 'ai-ag':17B 'ai-tool':20B 'attack':8A,50B,85C 'authent':6A,45B,90C 'build':39B 'caus':87C 'check':46B 'code':10A,64B,97C 'contain':80C 'could':61B,86C 'cve':11A,14A 'data':68B,102C 'denial':70B,104C 'disclosur':75B,109C 'escal':67B,99C 'execut':65B,98C 'flaw':60B 'framework':37B 'function':52B 'host':31B 'inform':74B,108C 'issu':91C 'lead':62B,95C 'let':7A,48B 'might':94C 'miss':5A,44B,89C 'nemo':2A,25B,33B,77C 'nvidia':1A,24B,32B,76C 'nvidia-nemo-agent-toolkit':23B 'privileg':66B,101C 'python':28B 'reach':51B 'run':9A 'say':58B 'self':30B 'self-host':29B 'servic':72B,106C 'tamper':69B,103C 'tool':22B 'toolkit':4A,27B,35B,79C 'vulner':82C,93C","nicknames":[],"mitigations":[],"who_affected":"Teams running NVIDIA NeMo Agent Toolkit to build or host agents, especially where the service accepts requests over a network. The sources do not say which deployment modes or versions are vulnerable, so treat any running instance as potentially exposed until checked. Teams not using NeMo Agent Toolkit can skip this.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T13:16:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"psirt@nvidia.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65145","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65145","severity":null,"published_at":"2026-10-27T13:16:59+00:00","modified_at":"2026-10-27T13:16:59+00:00","first_seen_at":"2026-10-27T13:31:51+00:00","fetched_at":"2026-10-27T13:31:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}