NVIDIA NeMo Agent Toolkit: Missing authentication for critical function
Summary
NVIDIA NeMo Agent Toolkit, a framework for building and running AI agents, contains a missing authentication flaw (CWE-306). A remote attacker without privileges or user interaction can reach the vulnerable function, which NVD rates as CVSS 10.0 (critical). Successful exploitation could lead to code execution, privilege escalation, data tampering, denial of service or information disclosure. The exact affected component and endpoint are not publicly specified.
Affected
- NVIDIA NeMo Agent Toolkit 1.0 to 1.8.0
- Default configuration: unaffected (according to the CNA record)
Fixed in
- NVIDIA NeMo Agent Toolkit 1.9.0 (named as remediation in NVIDIA bulletin 5912 according to secondary sources; verify against the vendor advisory)
Workaround
- No vendor workaround found.
- Upgrading to 1.9.0 is the remedy. Test first, as 1.9.0 contains breaking changes.
- Downgrading to 1.8.0 or older reintroduces the flaw.
Exploitation
- No known exploitation in the wild.
- No public proof of concept found. Absence of a PoC does not rule out private exploitation.
- Not listed in CISA KEV.
Our recommendation
- Inventory all NeMo Agent Toolkit instances, including pip-installed packages.
- Upgrade all instances in the affected range 1.0 to 1.8.0 to 1.9.0 after testing.
- Check whether any agent or service endpoint is reachable from outside the network and restrict access until patched.
- Review upgraded services for unexpected unauthenticated access and monitor for suspicious activity.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- NVIDIA Security Bulletin 5912 github.com
- NVD: CVE-2026-65145 nvd.nist.gov
- CVE Record: CVE-2026-65145 www.cve.org
- VulDB: CVE-2026-65145 vuldb.com
- OffSeq: CVE-2026-65145 radar.offseq.com
- NeMo Agent Toolkit releases github.com
- Strix: CVE-2026-65145 www.strix.ai
- AiCybr: CVE-2026-65145 patch and migration (secondary) aicybr.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 13:54.
Original description (NVD)
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.