Nemo Agent Toolkit
Monthly
The missing-authentication flaw in NVIDIA NeMo Agent Toolkit 1.0 through 1.8.0 leaves a critical toolkit function without a credential check, giving unauthenticated network attackers a path whose rated consequences include code execution, privilege escalation, data tampering, denial of service, and information disclosure. CVSS is 10.0 with AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, and the vuln.today priority label is act_now. No public exploit identified at time of analysis, and no CISA KEV entry appears in the supplied data; network reachability of the toolkit interface is the main practical exposure constraint, and upgrading past 1.8.0 is the vendor-directed remediation.
SQL injection (CWE-89) in NVIDIA NeMo Agent Toolkit versions 1.4 through 1.6 lets an attacker who can reach the toolkit's input path on the local system inject arbitrary SQL, with potential for data tampering, denial of service, and information disclosure. NVIDIA rates the flaw 8.4 (High) and the assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - unauthenticated with no user interaction, but local, so exploitation requires local reachability of the vulnerable query path rather than network access; that AV:L designation is atypical for SQL injection and is the main factor shaping real-world risk. No public exploit code was identified at time of analysis and the issue does not appear in CISA KEV; per the current decision signal this is a this-week priority rather than an emergency.
The missing-authentication flaw in NVIDIA NeMo Agent Toolkit 1.0 through 1.8.0 leaves a critical toolkit function without a credential check, giving unauthenticated network attackers a path whose rated consequences include code execution, privilege escalation, data tampering, denial of service, and information disclosure. CVSS is 10.0 with AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, and the vuln.today priority label is act_now. No public exploit identified at time of analysis, and no CISA KEV entry appears in the supplied data; network reachability of the toolkit interface is the main practical exposure constraint, and upgrading past 1.8.0 is the vendor-directed remediation.
SQL injection (CWE-89) in NVIDIA NeMo Agent Toolkit versions 1.4 through 1.6 lets an attacker who can reach the toolkit's input path on the local system inject arbitrary SQL, with potential for data tampering, denial of service, and information disclosure. NVIDIA rates the flaw 8.4 (High) and the assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - unauthenticated with no user interaction, but local, so exploitation requires local reachability of the vulnerable query path rather than network access; that AV:L designation is atypical for SQL injection and is the main factor shaping real-world risk. No public exploit code was identified at time of analysis and the issue does not appear in CISA KEV; per the current decision signal this is a this-week priority rather than an emergency.