EUVD-2026-66099
GHSA-c97f-w3wc-9q4h
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Install-time CWE-494 realistically needs attacker-controlled code delivery (MITM/poisoned source, AC:H) and a victim running the installer (UI:R); successful compromise is total (C/I/A:H).
Primary rating from Vendor (nvidia).
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.
Articles & Coverage 1
AnalysisAI
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer executing code without verifying its integrity, letting an attacker who can supply or interpose malicious code during installation achieve arbitrary code execution, privilege escalation, data tampering, information disclosure, and denial of service. NVIDIA assigns a CVSS of 9.8 with a fully network-based, no-privilege, no-interaction vector, though the flaw is rooted in the install process. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the NemoClaw installation process specifically (versions ≤0.0.21): the attacker must be able to deliver untrusted code into that process - for example by controlling or MITM-ing the code/package source the installer fetches - because the installer performs no integrity check (CWE-494). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals conflict and warrant scrutiny. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade NemoClaw to a release later than 0.0.21 as published in NVIDIA's advisory (https://github.com/NVIDIA/product-security/tree/main/2026/5872); the input confirms 0 through 0.0.21 are affected but does not state an exact fixed version, so treat the advisory as the source of the patched build - Patch available per vendor advisory, exact fixed version not independently confirmed here. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all NemoClaw installations and identify systems running version 0.0.21 or earlier; pause new deployments of any NemoClaw version until a patch is released. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Weak authentication in NVIDIA NemoClaw for Linux (versions 0 through 0.0.4) lets remote attackers bypass the authenticat
Improper certificate validation in NVIDIA NemoClaw for Linux (versions up to and including 0.0.1) allows network attacke
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a netw
Unauthenticated access to the NVIDIA NemoClaw inference server on Linux exposes sensitive model inference data and enabl
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to ex
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to exe
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privilege
Code injection in NVIDIA NemoClaw's migration command (Linux, versions up to 0.0.17) allows a local attacker with low-pr
Credential exposure in NVIDIA NemoClaw allows a local low-privileged user, upon triggering user interaction, to access i
Sensitive information disclosure in NVIDIA NemoClaw arises from process invocation that exposes secrets - such as API ke
Same weakness CWE-494 – Download of Code Without Integrity Check
View allShare
External POC / Exploit Code
Leaving vuln.today