EUVD-2026-66100
GHSA-9hcw-486j-wgc9
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain local low-privilege shell access
-
DeliveryInvoke NemoClaw migration command
-
ExploitSupply crafted code-injection payload
-
ExecutionPayload executed within NemoClaw process
-
PersistArbitrary code runs with process privileges
-
ImpactData exfiltration, tampering, or denial of service
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Code injection prevention, sandbox exec
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a local account on the Linux host with at least low-level user privileges (PR:L per CVSS vector) - no elevated or administrative rights needed at entry. The specific trigger is invoking NVIDIA NemoClaw's migration command with attacker-controlled input; the migration command must therefore be accessible to the user, which on a dedicated ML/AI workstation or pipeline system may be broadly available. Exploitation is limited to Linux systems running NemoClaw versions 0 through 0.0.17. No network-facing exposure exists (AV:L); remote attackers must first obtain local system access through another vector. No user interaction from a privileged user is required once the attacker can run the migration command. |
| Impact | The CVSS 7.8 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) correctly reflects a local, low-complexity, low-privilege code injection path with total system-level impact. However, several signals temper real-world urgency: EPSS is 0.16% at the 5th percentile, indicating the broader security community has not observed widespread exploitation attempts; SSVC confirms exploitation status as none and automatable as no, meaning mass automated targeting is not feasible. The technical impact rating of total from SSVC aligns with the C:H/I:H/A:H CVSS subscores, confirming that successful exploitation is severe. The non-automated, local-only attack path means this CVE primarily threatens environments where untrusted or semi-trusted local users can invoke NemoClaw migration commands - a narrower exposure surface than network-facing vulnerabilities. No KEV listing and no public exploit further reduce near-term urgency. Patch or remediation should still be prioritized for any multi-user Linux systems running NemoClaw, as the low complexity (AC:L) means exploitation requires no special conditions once local access exists. |
| Exploit ScenarioDerived | A local user with standard (low-privilege) access on a Linux system running NVIDIA NemoClaw crafts input to the migration command that injects malicious code into the command's execution path. Because attack complexity is low and no user interaction is required, the attacker executes arbitrary code under the process's privileges, potentially escalating further or exfiltrating data. No public exploit code has been identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Sep 01, 2026
Code injection in NVIDIA NemoClaw's migration command (Linux, versions up to 0.0.17) allows a local attacker with low-privilege access to inject and execute arbitrary code within the process context, yielding full confidentiality, integrity, and availability impact on the vulnerable system. SSVC rates technical impact as total, consistent with the CVSS 7.8 rating, though EPSS remains very low at 0.16% (5th percentile) and no active exploitation has been observed. No public exploit has been identified at time of analysis.
Earlier versions of this analysis (1)
Code injection in NVIDIA NemoClaw for Linux via its migration command enables a local attacker holding low-level privileges to inject and execute arbitrary code under specific high-complexity conditions. All tracked versions are affected per the wildcard CPE (cpe:2.3:a:nvidia:nemoclaw:*:*:*:*:*:*:*:*), with potential impact spanning full confidentiality breach, data tampering, and denial of service. No public exploit code or CISA KEV listing has been identified at time of analysis.
RemediationAI
Consult the NVIDIA product security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5872 for the official patched release; no specific fixed version number is explicitly stated in the available intelligence, so the advisory is the authoritative source. Until a patched version is applied, restrict execution of the NemoClaw migration command to trusted administrative accounts only, reducing the attack surface by limiting who holds the low-privilege access required for exploitation. On multi-user Linux systems, consider using file permission controls or sudo policies to prevent unprivileged users from invoking migration workflows. Organizations that do not actively use NemoClaw's migration functionality should disable or remove the tool until a verified patch is confirmed.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
NVIDIA NemoClaw is an NVIDIA-developed tool for Linux, likely part of the NeMo AI/ML ecosystem, at an early release stage (up to v0.0.17 per EUVD data). The affected component is its migration command, which fails to properly control the generation or evaluation of code from user-influenced input - classified under CWE-94 (Improper Control of Generation of Code). CWE-94 vulnerabilities arise when attacker-controlled data is interpreted as executable code (e.g., via eval-style constructs, unsafe deserialization, or template injection), rather than being treated as inert data. The CPE cpe:2.3:a:nvidia:nemoclaw:*:*:*:*:*:*:*:* covers all versions up to 0.0.17 on Linux. The local attack vector (AV:L) confirms exploitation requires a foothold on the host system.
Know when Nemoclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local attack vector confirmed by description; low privileges sufficient to invoke migration command; code injection yields full C/I/A impact with no scope change.
Primary rating from Vendor (nvidia).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
Articles & Coverage 1
Executive ViewAI
NVIDIA NemoClaw up to version 0.0.17 contains a code injection flaw in its migration command that allows system users with minimal privileges to execute arbitrary code and fully compromise affected systems. This vulnerability presents material risk to organizations running NemoClaw on shared Linux environments where service accounts or standard users can invoke the migration function. No vendor patch exists, requiring immediate operational containment through access restrictions and monitoring.
No vendor-released patch identified at time of analysis. Interim mitigations include: restrict interactive system access to administrative personnel on affected systems; disable the migration command if not mission-critical; deploy mandatory access controls via AppArmor or SELinux to confine NemoClaw process capabilities; implement continuous monitoring with alerts on suspicious process execution or capability-escalation attempts originating from NemoClaw; containerize vulnerable deployments with minimal privilege escalation paths; and segregate systems running NemoClaw from multi-user environments where possible.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Code injection occurs when an application accepts user input and passes it directly into a language interpreter or evaluator without proper sanitization.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Weak authentication in NVIDIA NemoClaw for Linux (versions 0 through 0.0.4) lets remote attackers bypass the authenticat
Improper certificate validation in NVIDIA NemoClaw for Linux (versions up to and including 0.0.1) allows network attacke
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer exe
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a netw
Unauthenticated access to the NVIDIA NemoClaw inference server on Linux exposes sensitive model inference data and enabl
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to ex
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to exe
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privilege
Credential exposure in NVIDIA NemoClaw allows a local low-privileged user, upon triggering user interaction, to access i
Sensitive information disclosure in NVIDIA NemoClaw arises from process invocation that exposes secrets - such as API ke
Exploit-DB