CVE-2026-65105

NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...

CVE-2026-24222

NVIDIA NemoClaw vulnerability CVE-2026-24222 affects the sandbox environment initialization component. A remote attacker can cause improper access control by sending prompt-injected content, leading to reading/exfiltrating host environment variables not properly restricted during sandbox creation...

CVE-2026-24231

NVIDIA NemoClaw is affected by CVE-2026-24231 in the validateEndpointUrl() SSRF protection pathway. A crafted endpoint URL referencing the 0.0.0.0/8 range through a blueprint configuration or CLI flag can trigger a server-side request forgery and may lead to information disclosure. The NVIDIA sec...

CVE-2026-65097

NVIDIA NemoClaw for Linux is affected by a vulnerability in its installation scripts , where an attacker could cause a download of code without integrity check . A successful exploit could lead to code execution , escalation of privileges , information disclosure , and data tampering . The CVSS 3...

CVE-2026-65084

NVIDIA NemoClaw for Linux contains an improper certificate validation flaw (CWE-295) in its deployment process , rated HIGH (CVSS 3.1: 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). A network-based attacker with no privileges but high attack complexity could exploit this to achieve information disclo...

CVE-2026-65098

CVE-2026-65098 affects NVIDIA NemoClaw for Linux (versions 0 through 0.0.4). The vulnerability resides in the remote-access helper workflow , where an attacker can trigger weak authentication (CWE-1390), potentially leading to code execution, information disclosure, and data tampering . NVIDIA as...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains an OS command injection vulnerability in the Telegram bridge component . A local attacker with low privileges can exploit this to achieve code execution, privilege escalation, information disclosure, and data tampering . The CVSS 3.1 score is 7.8 (HIGH) with a l...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process classified as CWE-494 (Code Download Without Integrity Check), allowing an attacker to cause execution of untrusted code. A successful exploit may lead to code execution, escalation of privileges, data tampering, infor...

CVE-2026-65082

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command that allows a local attacker to cause code injection. A successful exploit may lead to code execution, data tampering, information disclosure, and denial of service . The vulnerability carries a CVSS 3.1 base score of 7.0...

CVE-2026-65089

NVIDIA NemoClaw for Linux contains an OS command injection vulnerability in its status and logs plugin commands . A local attacker with low privileges can exploit this to achieve code execution, data tampering, information disclosure, or denial of service . The CVSS 3.1 score is 7.8 (HIGH) , with...

CVE-2026-65090

A vulnerability in the NIM management component of NVIDIA NemoClaw for Linux allows an attacker to perform OS command injection . Successful exploitation may lead to code execution, data tampering, information disclosure, and denial of service . The CVSS 3.1 score is 7.8 (HIGH) , with a local att...

CVE-2026-65099

NVIDIA NemoClaw for Linux is vulnerable to an OS command injection in its command-line interface . A local attacker with low privileges and no user interaction can exploit this flaw to achieve code execution, data tampering, information disclosure, and denial of service (CVSS 7.8, HIGH). The CVSS...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability that allows a local attacker with low privileges to invoke a process that exposes sensitive information , leading to information disclosure . The CVSS 3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confident...

CVE-2026-65087

NVIDIA NemoClaw contains a vulnerability due to insufficiently protected credentials . A successful exploit could lead to information disclosure and data tampering . The CVSS 3.1 base score is 5.6 (Medium) , with a local attack vector , low attack complexity, low privileges required, and user int...