NVIDIA NeMo Agent Toolkit Server-Side Request Forgery Vulnerability
Vulnerability
A server-side request forgery (SSRF) vulnerability has been identified in the chat API endpoint of the NVIDIA NeMo Agent Toolkit UI for Web. This vulnerability allows an attacker to manipulate server-side requests, potentially leading to unauthorized information disclosure and causing a denial-of-service condition.
Impact
Exploitation of this vulnerability could result in unauthorized information disclosure and a denial-of-service condition.
Remediation
Users are advised to update to version 1.3.0 or later. The updated version is available on the NVIDIA GitHub repository for the NeMo Agent Toolkit.
Added: Nov 25, 2025, 6:22 PM
Updated: Nov 25, 2025, 10:41 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
7.7relevance
1.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.