NVIDIA Nemoclaw vulnerabilities

14 CVEs affecting NVIDIA Nemoclaw, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-65105, published 2026-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-65099, published 2026-08-25. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code…
CVE-2026-65096, published 2026-08-25. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to…
CVE-2026-65090, published 2026-08-25. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code…
CVE-2026-65089, published 2026-08-25. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to…
CVE-2026-65098, published 2026-08-25. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to…
CVE-2026-65084, published 2026-08-25. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to…
CVE-2026-65105, published 2026-08-25. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this…
CVE-2026-65081, published 2026-08-25. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to…
CVE-2026-24222, published 2026-04-28. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that…
CVE-2026-65097, published 2026-08-25. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability…

Latest

CVE-2026-65088, published 2026-08-25. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information…
CVE-2026-65087, published 2026-08-25. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data…