Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-65145

Missing authentication in NVIDIA NeMo Agent Toolkit

CVSS 3.1
10.0 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-65145 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

NVIDIA NeMo Agent Toolkit does not require authentication for an operation an attacker can reach over the network without credentials or user interaction. Successful abuse can lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. NVIDIA has not listed affected builds or fixed versions.

What to do: Apply NVIDIA's update for CVE-2026-65145 when available. No workaround is stated.

ProductAffected
NVIDIA NeMo Agent Toolkit—
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.