Do Son 
TL;DR
NVIDIA has patched CVE-2026-65145, a NeMo Agent Toolkit vulnerability with the maximum CVSS score of 10.0. The October 27 NVIDIA security update also fixes five more flaws in NeMo Agent Toolkit, TensorRT-LLM and PhysX.
A missing authentication flaw lets a remote attacker take over NeMo Agent Toolkit with no login. Five other bugs carry CVSS scores from 7.1 to 8.4. Update NeMo Agent Toolkit to 1.9.0 and TensorRT-LLM to 1.3.0rc25.
- Total: 6 CVEs
- Severity: 1 Critical · 5 High
- Actively exploited: None confirmed
- Highest severity: 10.0 (Critical · CVSSv3) — CVE-2026-65145
- Action: Apply the latest security updates now
Notable CVEs
| CVE | CVSS (CVSSv3) | Type | Status |
|---|---|---|---|
| CVE-2026-65145 | 10 | CWE-306 | Not exploited |
| CVE-2026-65151 | 8.4 | CWE-89 | Not exploited |
| CVE-2026-65119 | 8.4 | CWE-829 | Not exploited |
| CVE-2026-47486 | 7.8 | CWE-787 | Not exploited |
| CVE-2026-65120 | 7.1 | CWE-918 | Not exploited |
| CVE-2026-24269 | 7.1 | CWE-918 | Not exploited |
Why It Matters
Developers use NeMo Agent Toolkit to build AI agents, and TensorRT-LLM to serve large language models. A flaw in either can expose models, data and the host. Notably, the CVSS 10.0 bug needs no privileges or user action, and it works over the network.
How the Attack Works
NeMo Agent Toolkit
According to NVIDIA, the critical flaw is “a missing authentication issue.” As a result, an attacker could gain “code execution, escalation of privileges, data tampering, denial of service, and information disclosure.” A second NeMo Agent Toolkit vulnerability, CVE-2026-65151 (CVSS 8.4), is a SQL injection bug.
TensorRT-LLM and PhysX
In TensorRT-LLM, CVE-2026-65119 (CVSS 8.4) affects tokenizer loading in the KvCacheAwareRouter. It could lead to code execution. Meanwhile, CVE-2026-65120 and CVE-2026-24269 (both CVSS 7.1) are server-side request forgery bugs. Finally, PhysX has an out-of-bounds write, CVE-2026-47486 (CVSS 7.8).
Affected Versions
- NeMo Agent Toolkit 1.0 to 1.8.0 (CVE-2026-65145) and 1.4 to 1.6 (CVE-2026-65151)
- TensorRT-LLM 1.3.0rc24
- PhysX 0.0 to 0.4.1.2
Patch and Mitigation
Install NeMo Agent Toolkit 1.9.0, TensorRT-LLM 1.3.0rc25 and PhysX 0.4.13 from NVIDIA’s GitHub repositories. Until then, keep agent services off public networks. That step limits exposure to this NeMo Agent Toolkit vulnerability while you test the NVIDIA security update.
NVIDIA says outside researchers found all six flaws. So far, no exploitation or public proof-of-concept has been confirmed, and none of the flaws appear in CISA’s KEV catalog. For full details, visit the NVIDIA Product Security portal.
Support Our Threat Intelligence
Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
