NeMo Agent Toolkit
An open-source AI agent runtime framework released by NVIDIA. It provides sandbox isolation, tool registration, and permission control capabilities, supporting the secure operation of multiple agent types within controlled environments.
Timeline (last 90 days)
On August 25, 2025, security firm Oasis Security publicly disclosed a complete attack chain targeting NVIDIA NeMo Agent Toolkit and Ollama.
NeMo Agent Toolkit integrates the open-source assistant OpenClaw by default, a project that once set a record of gaining 100,000 stars in 5 days.
Less than half a year after the NeMo Toolkit was open-sourced, its GitHub star count has already surpassed 22,000.
When NeMo Toolkit starts Ollama on Windows, it sets the listening address to 0.0.0.0, causing Ollama's Host header validation to be bypassed and CORS checks to be rendered ineffective.
Attackers tamper with a model's chat template by calling the create API, permanently injecting malicious instructions into the System prompt; this change is stored in the model's Modelfile and is invisible to the client and undetectable by standard tools.
The NeMo Agent Toolkit aims to simplify common agent patterns such as multi-turn dialogue, tool calling, and state management.
All Facts (5)
The NeMo Agent Toolkit aims to simplify common agent patterns such as multi-turn dialogue, tool calling, and state management.
60%UnverifiedNeMo Agent Toolkit integrates the open-source assistant OpenClaw by default, a project that once set a record of gaining 100,000 stars in 5 days.
50%UnverifiedWhen NeMo Toolkit starts Ollama on Windows, it sets the listening address to 0.0.0.0, causing Ollama's Host header validation to be bypassed and CORS checks to be rendered ineffective.
50%UnverifiedAttackers tamper with a model's chat template by calling the create API, permanently injecting malicious instructions into the System prompt; this change is stored in the model's Modelfile and is invisible to the client and undetectable by standard tools.
50%UnverifiedOn August 25, 2025, security firm Oasis Security publicly disclosed a complete attack chain targeting NVIDIA NeMo Agent Toolkit and Ollama.
50%