What happened
The NeMo Agent Toolkit (advisory 2026/5912, published 2026-10-27) contains a SQL injection defect where crafted input can alter queries, permitting data tampering, DoS and information disclosure. This is a distinct CVE in the same advisory as the already-disclosed missing-authentication flaw (CVE-2026-65145).
Why it matters
An AI agent toolkit that stores agent state, conversation history or tool outputs in a database can have that store tampered with or exfiltrated by SQL injection, corrupting agent behavior and leaking sensitive data.
Attack vector
An attacker reaches a parameterized database query in the NeMo Agent Toolkit service surface and injects SQL, enabling data tampering, denial of service, and information disclosure (CVSS 8.4, AV:L).
Affected systems
NVIDIA NeMo Agent Toolkit 1.4 to 1.6
Mitigation
Apply the 2026/5912 advisory fix / patched toolkit release (https://github.com/NVIDIA/product-security/tree/main/2026/5912).