CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Score

CVSS 3.1 10.0 Critical

Status

Awaiting Analysis - psirt@nvidia.com

Published

2026-10-27

Last modified

2026-10-27

Weaknesses

CWE-306

Affected products

• Nemo Agent Toolkit (Nvidia)

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-65145
• https://www.cve.org/CVERecord?id=CVE-2026-65145
• https://github.com/NVIDIA/product-security/tree/main/2026/5912