Missing Auth in NVIDIA NeMo Agent Toolkit: RCE, Priv Escalation
CVE-2026-65145 Published on October 27, 2026
NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Vulnerability Analysis
CVE-2026-65145 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-65145
Want to know whenever a new CVE is published for NVIDIA Nemo? stack.watch will email you.
