NeMo Agent Toolkit vulnerabilities

3 known vulnerabilities in NeMo Agent Toolkit from NVIDIA. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  NeMo Agent Toolkit: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-65151Oct 27, 2026NVIDIA

  NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.

• 10.0 Critical severity

  NeMo Agent Toolkit: Missing Authentication for Critical Functionality

  CVE-2026-65145Oct 27, 2026NVIDIA

  NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

• 7.6 High severity

  NeMo Agent ToolKit: Server-Side Request Forgery

  CVE-2025-33203Nov 25, 2025NVIDIA

  NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service.