NeMo Agent Toolkit CVE-2026-65151

The CVSS vector requires local access (AV:L) with no authentication (PR:N), low attack complexity (AC:L), and no user interaction (UI:N), limiting exploitation to attackers who can reach the toolkit's input path on the local system rather than remotely over a network. Affected deployments are NeMo Agent Toolkit versions 1.4 through 1.6. The specific product feature, configuration, or interface that passes attacker-controlled input into the SQL query is not described in the available sources, so the precise trigger cannot be stated; the AV:L designation is the primary limiting factor and should be confirmed with NVIDIA, as it is atypical for a SQL injection flaw.

NVIDIA scores this 8.4 (High) with vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, and the key tension is the attack vector: the vendor assigned AV:L (local), yet SQL injection (CWE-89) is most commonly a network-reachable flaw - this discrepancy means the realistic risk hinges on how input reaches the vulnerable query path, and should be verified with NVIDIA. If AV:L is accurate, an attacker needs local access to the host running the toolkit, which materially lowers real-world exposure versus a remote SQLi despite the high base score; the offsetting factor is PR:N (no authentication) and AC:L (low complexity), so once local access exists, exploitation is straightforward with full C/I/A impact. No EPSS probability was provided, the CVE is not on CISA KEV, and no proof-of-concept or exploit reference appears in the input, so there is no public exploit identified at time of analysis and no evidence of active exploitation. The vuln.today decision label is this_week, indicating a prompt-but-not-emergency remediation priority consistent with a high-impact flaw that currently lacks exploitation signals. Net: a genuine high-severity bug for anyone running affected versions, but the local attack vector and absence of exploitation evidence place it below internet-facing critical issues - confirm the AV:L assumption, since a network-reachable SQLi would substantially raise priority.

An attacker with local access to a host running NVIDIA NeMo Agent Toolkit (versions 1.4 through 1.6) supplies crafted input that is incorporated unsanitized into a backend SQL query, allowing the attacker to read or modify stored data or crash the service. The specific feature or interface that constructs the query is not described in the available sources. No public exploit identified at time of analysis.