EUVD-2026-66095
GHSA-8jwf-vh22-q934
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach NemoClaw remote-access helper over network
-
DeliveryBypass weak authentication check
-
ExploitGain unauthorized helper access
-
ExecutionExecute code or tamper with data
-
ImpactDisclose sensitive information from host
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Strong authentication
|
| Exploitation Conditions | Exploitation requires network reachability to the NemoClaw remote-access helper workflow on a Linux host running an affected version (0 through 0.0.4); the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication, no user interaction, and low complexity against a default-reachable helper. The primary limiting factors are the narrow affected-product scope (only deployments actually running NVIDIA NemoClaw), the requirement that the remote-access helper be network-exposed rather than firewalled off, and the current absence of public exploit code, which raises the effort to develop a working attack. |
| Impact | The signals partially conflict and should be weighed together rather than trusting the headline number. The CVSS vector (AV:N/AC:L/PR:N/UI:N) describes a trivially reachable, unauthenticated, low-complexity network attack with total technical impact - CISA's SSVC likewise rates Technical Impact as 'total.' However, SSVC records Exploitation as 'none' and Automatable as 'no,' EPSS sits at only 0.57% (45th percentile), there is no CISA KEV listing, and no public proof-of-concept, which together indicate this is not yet a mass-exploited or wormable threat. The practical read is that NemoClaw's niche deployment footprint, not any technical mitigation, is what keeps real-world risk lower than the 9.8 implies; any organization that actually runs NemoClaw should still treat it as a high-priority patch because the exploitation prerequisites are minimal once the product is exposed. |
| Exploit ScenarioDerived | An attacker who can reach a NemoClaw host over the network connects to the remote-access helper endpoint and defeats its weak authentication without valid credentials, then leverages that access to run code, read sensitive data, or alter files on the Linux system. No user interaction or prior privileges are required per the CVSS vector, though no public exploit code is currently available to lower the effort. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Sep 01, 2026
Weak authentication in NVIDIA NemoClaw for Linux (versions 0 through 0.0.4) lets remote attackers bypass the authentication enforced by its remote-access helper workflow, enabling code execution, information disclosure, and data tampering on the host. The flaw was self-reported by NVIDIA and carries a critical 9.8 CVSS rating with a fully unauthenticated network vector. No public exploit identified at time of analysis, and EPSS estimates only a 0.57% 30-day exploitation probability, so the raw severity outpaces observed real-world activity.
Earlier versions of this analysis (1)
Weak authentication in NVIDIA NemoClaw's remote-access helper workflow on Linux enables network-accessible exploitation with no privileges required, potentially leading to remote code execution, information disclosure, and data integrity compromise. The CVSS vector (AV:N/AC:H/PR:N/UI:N) indicates that while no authentication is required to attempt exploitation, high attack complexity conditions must be met, limiting opportunistic mass exploitation. No public exploit code and no CISA KEV listing are identified at time of analysis; the vulnerability was self-disclosed by NVIDIA.
RemediationAI
Upgrade NemoClaw to a release later than 0.0.4; the EUVD range identifies 0.0.4 as the last affected version, and administrators should consult the NVIDIA product-security advisory at https://github.com/NVIDIA/product-security/tree/main/2026/5872 for the exact fixed build, since a specific patched version number is not independently confirmed in the available data (Patch available per vendor advisory). Until the fix is deployed, restrict network reachability of the NemoClaw remote-access helper by placing it behind a firewall or VPN and limiting inbound access to trusted management hosts only, and disable the remote-access helper workflow if it is not required - the trade-off is loss of remote-management convenience, but it removes the exposed authentication surface. Because the weakness is in authentication itself, avoid relying on the helper's own access controls as a compensating measure and instead enforce network-layer allowlisting.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
NemoClaw is an NVIDIA software component (cpe:2.3:a:nvidia:nemoclaw) that ships a remote-access helper used to broker or proxy connections to the Linux host. The root cause is classified as CWE-1390 (Weak Authentication), meaning the authentication mechanism guarding that helper workflow can be satisfied or circumvented without valid credentials - for example through predictable, missing, or improperly validated authentication material. Because the helper mediates remote access, a weak-authentication defect there collapses the primary trust boundary, which is why NVIDIA scores full confidentiality, integrity, and availability impact (C:H/I:H/A:H).
Know when Nemoclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weak authentication on a network-reachable remote-access helper allows unauthenticated low-complexity access with full code-execution, disclosure, and tampering impact, so PR:N and C/I/A:H.
Primary rating from Vendor (nvidia).
CVSS VectorNVD
Lifecycle Timeline
4DescriptionNVD
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
Articles & Coverage 1
Executive ViewAI
NVIDIA NemoClaw for Linux (versions 0-0.0.4) contains a critical authentication bypass in its remote-access helper that allows unauthenticated attackers to execute code and tamper with data on affected systems. Organizations using NemoClaw for remote administration face immediate risk of unauthorized system access and potential data compromise, with no vendor patch currently available to remediate the flaw.
No vendor-released patch identified at time of analysis. Interim mitigations: enforce firewall rules to restrict inbound network access to NemoClaw remote-access services; require authentication through a separate VPN gateway; implement real-time monitoring and alerting on authentication attempts and unusual system activity; consider operational disabling of the remote-access feature if not mission-critical until a patch is released.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Improper certificate validation in NVIDIA NemoClaw for Linux (versions up to and including 0.0.1) allows network attacke
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer exe
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a netw
Remote unauthenticated attackers can exfiltrate sensitive host environment variables from NVIDIA NeMoClaw by injecting m
Unauthenticated access to the NVIDIA NemoClaw inference server on Linux exposes sensitive model inference data and enabl
OS command injection in NVIDIA NemoClaw for Linux allows a local low-privileged attacker to execute arbitrary operating
OS command injection in NVIDIA NemoClaw's NIM management component on Linux enables a local authenticated attacker to ex
OS command injection in NVIDIA NemoClaw's command-line interface on Linux enables a local low-privileged attacker to exe
OS command injection in NVIDIA NemoClaw's Telegram bridge component on Linux enables a local attacker with low-privilege
Code injection in NVIDIA NemoClaw's migration command (Linux, versions up to 0.0.17) allows a local attacker with low-pr
Server-side request forgery in NVIDIA NemoClaw's validateEndpointUrl() function allows local attackers with user interac
Credential exposure in NVIDIA NemoClaw allows a local low-privileged user, upon triggering user interaction, to access i
Exploit-DB