by Kastro
Paper/Archive/CVE-2026-65081

CVE-2026-65081

NVIDIA NemoClaw — NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code.

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 35.4.354 × 207.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.

Affected

ProductAffectedFixed inSource
NemoClaw0 to 0.0.21–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvidia (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2026-65081refcve.org/CVERecord?id=CVE-2026-65081refgithub.com/NVIDIA/product-security/tree/main/2026/5872