CVE-2026-65081
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process that allows an attacker to cause execution of untrusted code. Successful exploitation could lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.
Risk Assessment
An attacker could install malicious software, gain elevated privileges, compromise data, and disrupt system operations, posing a serious security threat.
Recommendation
Update NemoClaw to a patched version immediately and ensure the installation process uses only trusted sources.
Other vulnerabilities in NVIDIA NemoClaw
See all- CVE-2026-24222High
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, allowing a remote attacker to cause improper access control by sending prompt-injected content. This may lead to information disclosure through reading and exfiltrating host environment variables.
- CVE-2026-65105High
NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service.
- CVE-2026-65099High
NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
- CVE-2026-65098High
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
- CVE-2026-65097High
NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
- CVE-2026-65096High
NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
- CVE-2026-65090High
NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component that allows an attacker to perform OS command injection. Successful exploitation could lead to code execution, data tampering, information disclosure, and denial of service.
- CVE-2026-65089High
NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands that allows an attacker to perform OS command injection. Successful exploitation could lead to code execution, data tampering, information disclosure, and denial of service.
- CVE-2026-65087Medium
NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials. A successful exploit might lead to information disclosure and data tampering.
- CVE-2026-65084High
NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process that allows an attacker to cause improper certificate validation. Successful exploitation could lead to information disclosure, data tampering, code execution, and escalation of privileges.
Original NVD description (English source)
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.