Evidence · DiggingBeagle record
NVIDIA NeMo Agent Toolkit 2026 security bulletin 5912
NVIDIA first-party bulletin covering separate missing-authentication and SQL-injection vulnerabilities in toolkit versions.
- Published
- Oct 29, 2026
- Source role
- vendor statement
Evidence record
NVIDIA first-party bulletin covering separate missing-authentication and SQL-injection vulnerabilities in toolkit versions.
Claim-level citations (2)
- supportsNeMo Agent Toolkit had a separate SQL injection with a local attack vector: NVIDIA lists a separate SQL injection, CVE-2026-65151, affecting toolkit 1.4 through 1.6 and fixed in 1.7.0; the described vector is local.
NVIDIA product-security bulletin 5912, CVE-2026-65151 and version range
- supportsNeMo Agent Toolkit lacked authentication at a potentially executable network boundary: NVIDIA reports CVE-2026-65145 as a missing authentication condition in NeMo Agent Toolkit 1.0 through 1.8.0, fixed in 1.9.0.
NVIDIA product-security bulletin 5912, CVE-2026-65145 description and affected versions