What’s Vulnerable › Vulnerabilities

CVE-2026-65145

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-27 · updated 2026-10-27
• Weakness: CWE-306

Description

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Summary

CVE-2026-65145 is a critical missing authentication flaw in NVIDIA NeMo Agent Toolkit (CVSS 10.0) that could allow an attacker to execute code, escalate privileges, tamper with data, cause denial of service, and disclose information. All deployments of the affected NVIDIA NeMo Agent Toolkit are potentially at risk. The vulnerability is not listed in CISA KEV and no exploitation has been reported. Apply the vendor's patched release or, if unavailable, restrict network access to the toolkit and enforce authentication at a gateway until a fix is deployed.

CVE-2026-65145 ثغرة حرجة في NVIDIA NeMo Agent Toolkit بسبب غياب المصادقة (CVSS 10.0)، وقد تتيح للمهاجم تنفيذ تعليمات برمجية ورفع الصلاحيات والتلاعب بالبيانات وتعطيل الخدمة والكشف عن المعلومات. تتأثر جميع عمليات نشر NVIDIA NeMo Agent Toolkit المعنية. الثغرة غير مدرجة في CISA KEV ولم يُبلَّغ عن استغلالها. طبّق الإصدار المُصحَّح من المورّد، أو إلى حين توفره قيّد الوصول الشبكي إلى الأداة وفرض المصادقة عبر بوابة.

Affected products

• NVIDIA NeMo Agent ToolKit: from 1.0 through 1.8.0

References

• https://github.com/NVIDIA/product-security/tree/main/2026/5912
• https://nvd.nist.gov/vuln/detail/CVE-2026-65145
• https://www.cve.org/CVERecord?id=CVE-2026-65145

Get alerted when CVE-2026-65145 or the next vulnerability affects your stack