What is the CVSS score of CVE-2026-24231?

CVE-2026-24231 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

NVIDIA NemoClaw CVE-2026-24231

EUVD-2026-26080 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-04-28 nvidia

Information Disclosure SSRF Nvidia

6.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.3 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Apr 28, 2026 - 20:06 vuln.today

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26080

Analysis Generated

Apr 28, 2026 - 19:30 vuln.today

CVE Published

Apr 28, 2026 - 17:46 nvd

MEDIUM 6.3

DescriptionCVE.org

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.

AnalysisAI

Server-side request forgery in NVIDIA NemoClaw's validateEndpointUrl() function allows local attackers with user interaction to supply crafted endpoint URLs targeting the 0.0.0.0/8 address range via blueprint configuration files or CLI flags, leading to information disclosure. The vulnerability affects all versions of NemoClaw and requires local access with user interaction to trigger, limiting exposure to systems where untrusted users can modify configuration or invoke CLI commands.

Technical ContextAI

NemoClaw implements an SSRF protection validation function (validateEndpointUrl()) intended to prevent server-side request forgery attacks by restricting which URLs the application can be instructed to access. The vulnerability exists in this protection mechanism itself-the validator fails to properly block requests to the 0.0.0.0/8 address range (0.0.0.0 to 0.255.255.255), which is the 'This Network' broadcast range. An attacker can bypass the SSRF filter by crafting a malicious endpoint URL within this range and injecting it through blueprint configuration files or command-line interface flags. This is a CWE-918 (Server-Side Request Forgery) issue rooted in improper input validation of URL schemes and network addresses.

RemediationAI

Apply the patched version of NVIDIA NemoClaw released by NVIDIA as detailed in the security advisory at https://nvidia.custhelp.com/app/answers/detail/a_id/5837. NVIDIA documentation will specify the minimum patched version required. Until patching is possible, restrict local shell access to NemoClaw systems to trusted users only, disable or restrict CLI access to non-administrators, and implement file integrity monitoring on blueprint configuration files to detect unauthorized modifications. Additionally, audit existing blueprint configurations for suspicious endpoint URLs referencing 0.0.0.0/8 addresses. These compensating controls reduce exposure but do not eliminate the underlying vulnerability; patching should be prioritized once a patched release is available.