NVIDIA fixes CVSS 10 flaw in NeMo Agent Toolkit

NVIDIA has disclosed a high-severity vulnerability in the NeMo Agent Toolkit, tracked as CVE-2026-65145, which carries a CVSSv3 score of 10.0. The flaw is described by NVIDIA as a missing authentication issue that could allow a remote attacker to take control of NeMo Agent Toolkit without any login, enabling code execution, privilege escalation, data tampering, denial of service and information disclosure.

The October 27 security update from NVIDIA also patches five additional defects across NeMo Agent Toolkit, TensorRT-LLM and PhysX. The company notes that outside researchers identified all six flaws, but there has been no confirmed exploitation and none appear in CISA KEV as of the report date.

The most severe flaw, CVE-2026-65145, affects NeMo Agent Toolkit; other tracked issues include CVE-2026-65151 (CWE-89) in NeMo, CVE-2026-65119 (CWE-829) in TensorRT-LLM, CVE-2026-65120 (CWE-918) and CVE-2026-24269 (CWE-918) as server-side request forgery bugs, and CVE-2026-47486 (CWE-787) in PhysX.

Affected versions span NeMo Agent Toolkit 1.0–1.8.0 for CVE-2026-65145 (and 1.4–1.6 for CVE-2026-65151), TensorRT-LLM 1.3.0rc24, and PhysX 0.0–0.4.1[.]2. Nvidia recommends applying updates to NeMo Agent Toolkit 1.9.0, TensorRT-LLM 1.3.0rc25 and PhysX 0.4.13 from NVIDIA’s GitHub repositories. Until the patches are applied, NVIDIA advises keeping agent services off public networks to limit exposure during testing of the fix. The notes state that no exploitation or public proof-of-concept has been confirmed.