What happened
NVIDIA NeMo Agent Toolkit is missing authentication on a service surface (CWE-306). A remote attacker can reach the toolkit without valid credentials; a successful exploit can lead to remote code execution, privilege escalation, data tampering, denial of service, and information disclosure. A companion SQL-injection issue (CVE-2026-65151, CVSS 8.4) affects the same toolkit. Published 2026-10-27 with CVSS 10.0.
Why it matters
This is agentic-AI infrastructure: the toolkit provisions and controls LLM agents and their tool loop. Missing auth means an unauthenticated attacker can drive or hijack the agent runtime — not just read data — potentially executing code in the context of the agent platform and pivoting into the workloads the agents touch.
Attack vector
Unauthenticated access to a NeMo Agent Toolkit service endpoint; the missing-authentication (CWE-306) flaw allows an attacker to reach agent-management/execution surfaces without credentials, leading to code execution, privilege escalation, data tampering, or DoS of the agent runtime.
Affected systems
NVIDIA NeMo Agent Toolkit (advisory 2026/5912); sibling SQL-injection flaw CVE-2026-65151 (CVSS 8.4) also affects it
Mitigation
Apply NVIDIA product-security bulletin 2026/5912 patches. Note deprecation: plan migration off NeMo Agent Toolkit (EOL end of 2026) and restrict network exposure of the toolkit service (authenticate/bind to trusted interfaces) as a compensating control.