The same NVIDIA bulletin identifies CVE-2026-65151, a SQL injection in NeMo Agent Toolkit 1.4 through 1.6 that the vendor says was fixed by version 1.7.0. The local attack vector is a critical scope qualifier. It does not establish that an anonymous internet client could send an HTTP request and issue arbitrary SQL to a remote database. The query-building…
Inspect the ClaimsCase · DiggingBeagle record
NeMo Agent Toolkit had a separate SQL injection with a local attack vector
CVE-2026-65151 describes a SQL injection in NeMo Agent Toolkit; its local attack vector must not be conflated with the missing-authentication issue.
Scope
NVIDIA bulletin with a local-vector SQL injection limited to toolkit 1.4 through 1.6; precise user input and database permissions remain unreported.
Assessment profile
Assessment method- Setting
- research demonstration
- Exploitation
- not established
- Evidence
- Grade C
- Remediation
- fixed reported
- AI role
- AGAINST AI
Basis and provenance
NVIDIA reports CVE-2026-65151 with a repair. The exact query sink and independent victim evidence were not public. Impact remains unrated because the scoped record does not establish a calibrated severity-to-impact-band mapping.
Assessed Oct 31, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-C26-NEMO-LOCAL-SQL-1 · NVIDIA NeMo Agent Toolkit 2026 security bulletin 5912
At a glance
The advisory scores a local attack vector; it does not establish anonymous network SQL injection or arbitrary access to every database.
Read the implicationsThe vulnerable query construction and real user principal were not identified publicly. No production database compromise was verified.
Limits and uncertaintyFull account
The same NVIDIA bulletin identifies CVE-2026-65151, a SQL injection in NeMo Agent Toolkit 1.4 through 1.6 that the vendor says was fixed by version 1.7.0. The local attack vector is a critical scope qualifier. It does not establish that an anonymous internet client could send an HTTP request and issue arbitrary SQL to a remote database. The query-building function, reachable principal and database privilege have not been exposed in the summarized notice.
Both vulnerabilities affect the same toolkit, but they are distinct failure mechanisms with different prerequisites and fixes. Keeping them as separate Cases allows a reader to identify the affected versions and decide which boundary can be exercised in their own deployment rather than counting one advisory as one generic remotely exploitable bug.
Mechanism and trust boundary
- 01
Step
- 02
Step
- 03
Step
Timeline
- Oct 29, 2026disclosure
Public disclosure
Claims & evidence
CLM-C26-NEMO-LOCAL-SQL-1NVIDIA lists a separate SQL injection, CVE-2026-65151, affecting toolkit 1.4 through 1.6 and fixed in 1.7.0; the described vector is local.supported
Basis: reported finding
- supportsNVIDIA NeMo Agent Toolkit 2026 security bulletin 5912vendor statement
NVIDIA product-security bulletin 5912, CVE-2026-65151 and version range
Implications
The advisory scores a local attack vector; it does not establish anonymous network SQL injection or arbitrary access to every database.
Controls and mitigations
- Update versions 1.4 through 1.6 to version 1.7.0 or later, use parameterized queries and identify the local input principal.
Unknowns and contradictions
- The vulnerable query construction and real user principal were not identified publicly.
- No production database compromise was verified.
Sources and citation
Material revision history
- Oct 31, 2026 · Canonical change recorded · new in release · revision 208