---
id: "CVE-2026-65145"
kind: "vulnerability"
aliases: ["CVE-2026-65145"]
title: "NVIDIA NeMo Agent Toolkit: missing authentication lets attackers run code"
severity: "critical"
cvss: 10.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-agents", "ai-tooling", "nvidia-nemo-agent-toolkit", "python", "self-hosted"]
not_affected_if: ["not-using-nemo-agent-toolkit"]
published_at: "2026-10-27T13:16:59+00:00"
first_seen_at: "2026-10-27T13:31:51+00:00"
updated_at: "2026-10-27T13:32:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65145", "first_seen_at": "2026-10-27T13:31:51+00:00"}]
---

# NVIDIA NeMo Agent Toolkit: missing authentication lets attackers run code

NVIDIA NeMo Agent Toolkit, a framework for building AI agents, has a missing authentication check that lets an attacker reach functions they should not. The advisory says the flaw could lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed NeMo Agent Toolkit version with `pip show nvidia-nat` (the package name is not confirmed by the sources; verify before relying on it)
- Find running NeMo Agent Toolkit services and check whether they are reachable from untrusted networks; exact endpoints unknown

## Fix

- Update NVIDIA NeMo Agent Toolkit to the patched version named in the NVIDIA advisory (version unknown from these sources)
- Until patched, restrict network access to any NeMo Agent Toolkit service and do not expose it to the internet

## Timeline

- 2026-10-27T13:31:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-65145

## From the sources

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_