NVIDIA has issued a perfect 10 for a missing authentication check in its own agent toolkit. The Injection reports that on October 27, 2026, NVIDIA disclosed two flaws in the NeMo Agent Toolkit. “The critical one, CVE-2026-65145, is a missing authentication check rated CVSS 10.0 that affects versions 1.0 through 1.8.0 and is fixed in 1.9.0.”
Quick Take
- Product: NVIDIA NeMo Agent Toolkit, used to build and run agentic workflows.
- Bug: CVE-2026-65145, missing authentication, CVSS 10.0, versions 1.0 through 1.8.0.
- Fix: Upgrade to NeMo Agent Toolkit 1.9.0 or later. NVIDIA disclosed a second, less severe flaw in the same bulletin; take both fixes from that release.
- If 1.0–1.8.0 was reachable: treat the service as exposed, rotate any secrets the toolkit could reach, and review access logs.
What happened
A CVSS 10.0 missing-authentication CVE means the scorer believes an unauthenticated, network-reachable attacker could fully compromise the affected component. On an agent toolkit, that typically implies the ability to drive agent tools, reach connected systems, or run actions the toolkit is wired to perform — without logging in. NVIDIA’s October 27 bulletin is the official record; The Injection’s week-44 summary is the account i10x is relying on for versions and the 1.9.0 fix.
i10x has not independently mapped the exact unauthenticated endpoint. The actionable fact is the score, the version range, and the existence of a vendor fix.
What you should do
- Upgrade every NeMo Agent Toolkit deployment to 1.9.0 or later, including development and lab instances that happen to be on a network.
- Do not expose the toolkit’s control ports to the internet at all, even after patching; a 10.0 on the previous releases is a sign that this surface was already too open.
- Rotate credentials and review tool-audit logs if an unpatched instance was reachable.
What it means
Agent toolkits are control planes. They sit above models, tools, and sometimes robots or cloud accounts. Missing authentication on that layer is in the same category as an unauthenticated Kubernetes API or CI orchestrator. NVIDIA’s 10.0 and the 1.9.0 fix should be treated as an emergency change, not a quarterly library bump.
About the analysis
Researched and written with AI assistance under the editorial responsibility of the i10X News team. The title image is an AI-generated illustration. Read our AI Use Policy. Spotted an error? Request a correction.
This i10x report is based on The Injection’s week-44 summary of NVIDIA’s October 27, 2026 NeMo Agent Toolkit disclosures. i10x did not test the toolkit.
