EUVD-2026-66105
GHSA-hjmg-p9q2-24h6
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Local vector and low privilege reflect credential access requiring existing host access; UI:R aligns with a triggered operation; C:H from credential disclosure, I:L from data tampering potential, A:N as no availability impact described.
Primary rating from Vendor (nvidia).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering.
AnalysisAI
Credential exposure in NVIDIA NemoClaw allows a local low-privileged user, upon triggering user interaction, to access insufficiently protected credential material stored or accessible within the application's runtime context. The CVSS 5.6 Medium score reflects the constrained local attack vector (AV:L), but the high confidentiality impact (C:H) indicates that successfully harvested credentials could enable meaningful lateral movement or downstream access beyond the initial system. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) local access to the target host running NVIDIA NemoClaw (AV:L - no remote exploitation path), (2) a low-privileged user account on that system (PR:L), and (3) user interaction (UI:R) - likely a legitimate user or scheduled process triggering a NemoClaw operation that causes credential exposure, such as authentication, workflow execution, or configuration loading. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate-to-low for most environments. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the NVIDIA Product Security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5872 for official patch or upgrade guidance - no specific fixed version is confirmed from the available data, so 'Patch available per vendor advisory' is the appropriate status. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Weak authentication in NVIDIA NemoClaw for Linux (versions 0 through 0.0.4) lets remote attackers bypass the authenticat
Improper certificate validation in NVIDIA NemoClaw for Linux (versions up to and including 0.0.1) allows network attacke
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer exe
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a netw
Unauthenticated access to the NVIDIA NemoClaw inference server on Linux exposes sensitive model inference data and enabl
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to ex
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to exe
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privilege
Code injection in NVIDIA NemoClaw's migration command (Linux, versions up to 0.0.17) allows a local attacker with low-pr
Sensitive information disclosure in NVIDIA NemoClaw arises from process invocation that exposes secrets - such as API ke
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today