CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a missing authentication vulnerability that an attacker could exploit. This may lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

Missing authentication in the agent toolkit may allow unauthorized parties to fully control system functions. Consequences may include malicious code execution and data leakage.

Update NVIDIA NeMo Agent Toolkit to a patched version and verify that authentication mechanisms are properly enforced. Restrict network access to the service to trusted sources.