CVE-2026-65151

HighCVSS 8.4

Published: 27/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Summary

NVIDIA NeMo Agent Toolkit contains a SQL injection vulnerability that an attacker could exploit. Successful exploitation may lead to data tampering, denial of service, and information disclosure.

Risk Assessment

SQL injection may allow an attacker to manipulate data and access information they should not reach. It may also disrupt service availability.

Recommendation

Update NVIDIA NeMo Agent Toolkit to a patched version. Apply input validation and least-privilege principles for database accounts.

Other vulnerabilities in NVIDIA NeMo Agent Toolkit

CVE-2026-65145Critical
NVIDIA NeMo Agent Toolkit contains a missing authentication vulnerability that an attacker could exploit. This may lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

Original NVD description (English source)

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS