NeMo Agent Toolkit EUVD-2026-110824

The affected component is NVIDIA NeMo Agent Toolkit versions 1.0 through 1.8.0, and the root cause is CWE-306 (Missing Authentication for a Critical Function), so exploitation requires that a NeMo toolkit service exposing the affected critical function be reachable by the attacker over the network (consistent with AV:N/PR:N/UI:N - no credentials and no user interaction). The available sources do NOT name the exact feature, endpoint, API, protocol or configuration setting that lacks authentication, so the precise trigger is not described in the available sources. The principal limiting factor is network exposure: deployments where the toolkit's interface is not reachable by untrusted networks (e.g., bound to localhost or behind an authenticating proxy/network segmentation) substantially reduce realistic exposure, even though the vulnerability itself needs no authentication. Upgrading past 1.8.0 to the vendor-fixed release is the definitive remediation per NVIDIA's advisory.

This is a genuine top-priority issue, not a high-CVSS-but-low-real-risk case. Multiple signals align: the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) scores a maximal 10.0, indicating remote, low-complexity, unauthenticated exploitation with scope change and total compromise of confidentiality, integrity and availability; the CWE-306 (Missing Authentication for a Critical Function) root cause is consistent with that PR:N rating; and the vuln.today Decision label is 'act_now'. The advisory was issued by NVIDIA itself (vendor-confirmed), and EUVD tracks it as EUVD-2026-110824 affecting versions 1.0 through 1.8.0. Signals that are ABSENT and should temper certainty: no EPSS exploitation-probability score was supplied, the CVE is NOT listed in CISA KEV (so there is no confirmation of active exploitation), and no SSVC automatable/technical-impact decision points were provided beyond the aggregate 'act_now' label. The only references are the NVD/CVE.org records and the NVIDIA product-security advisory directory - none is verified working exploit code. Net: treat as critical and patch immediately on the strength of the vendor-confirmed unauthenticated-RCE-class vector and act_now label, while noting that real-world exploitation has not yet been confirmed (no KEV, no EPSS).

A remote, unauthenticated attacker reaches a network-exposed NVIDIA NeMo Agent Toolkit service (versions 1.0-1.8.0) and invokes a critical function that fails to enforce authentication, per the CWE-306 root cause. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N with scope change, the attacker needs no credentials, no user interaction and only low attack complexity to reach impact that NVIDIA states may include code execution, privilege escalation, data tampering, denial of service and information disclosure. No verified working public exploit was identified at the time of analysis; the exact function and request needed to trigger the flaw are not described in the available sources.