EUVD-2026-66095
GHSA-8jwf-vh22-q934
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weak authentication on a network-reachable remote-access helper allows unauthenticated low-complexity access with full code-execution, disclosure, and tampering impact, so PR:N and C/I/A:H.
Primary rating from Vendor (nvidia).
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
Articles & Coverage 1
AnalysisAI
Weak authentication in NVIDIA NemoClaw for Linux (versions 0 through 0.0.4) lets remote attackers bypass the authentication enforced by its remote-access helper workflow, enabling code execution, information disclosure, and data tampering on the host. The flaw was self-reported by NVIDIA and carries a critical 9.8 CVSS rating with a fully unauthenticated network vector. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the NemoClaw remote-access helper workflow on a Linux host running an affected version (0 through 0.0.4); the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication, no user interaction, and low complexity against a default-reachable helper. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals partially conflict and should be weighed together rather than trusting the headline number. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade NemoClaw to a release later than 0.0.4; the EUVD range identifies 0.0.4 as the last affected version, and administrators should consult the NVIDIA product-security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5872 for the exact fixed build, since a specific patched version number is not independently confirmed in the available data (Patch available per vendor advisory). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and inventory all systems running NemoClaw versions 0 through 0.0.4 and immediately disable remote-access features if operationally feasible or isolate affected systems from untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Improper certificate validation in NVIDIA NemoClaw for Linux (versions up to and including 0.0.1) allows network attacke
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer exe
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a netw
Unauthenticated access to the NVIDIA NemoClaw inference server on Linux exposes sensitive model inference data and enabl
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to ex
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to exe
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privilege
Code injection in NVIDIA NemoClaw's migration command (Linux, versions up to 0.0.17) allows a local attacker with low-pr
Credential exposure in NVIDIA NemoClaw allows a local low-privileged user, upon triggering user interaction, to access i
Sensitive information disclosure in NVIDIA NemoClaw arises from process invocation that exposes secrets - such as API ke
Same weakness CWE-1390 – Weak Authentication
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today