SQL Injection Vulnerability in NVIDIA NeMo Agent Toolkit
CVE-2026-65151

8.4HIGH

Key Information:

Vendor

Nvidia
Status
Nemo Agent Toolkit
Vendor
CVE Published:
27 October 2026

What is CVE-2026-65151?

The NVIDIA NeMo Agent Toolkit is susceptible to a SQL injection vulnerability that enables attackers to craft malicious queries. If successfully exploited, this flaw can result in unauthorized data manipulation, denial of service, and potentially sensitive information disclosure. Security measures should be implemented promptly to mitigate associated risks and protect sensitive data.

Affected Version(s)

NeMo Agent Toolkit All 1.4 to 1.6

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65151
https://www.cve.org/CVERecord?id=CVE-2026-65151
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.