Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-65145: NVIDIA NeMo Agent Toolkit allows unauthenticated code execution
CVE-2026-65145 · published today
Summary
The NVIDIA NeMo Agent Toolkit does not properly verify a user's identity, so an attacker could access it without logging in. This could let the attacker run their own code, steal or change data, and disrupt the service. Apply the vendor's security update or restrict access to trusted networks until the fix is installed.
Original advisory text
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampe...
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CVE-2026-65145 · NVD
Track software like this
Free during beta