Read the docs

NVIDIA

Records1248All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Nemoclaw · all components

TI-2026-46491 CVE-2026-65098 · GHSA-8jwf-vh22-q934

Weak authentication in NVIDIA NemoClaw

Priority MEDIUM 45

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2026-08-25 No fix listed CWE-1390
Priority MEDIUM 43

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2026-08-25 No fix listed CWE-295
Priority MEDIUM 43

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read a…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00395 Published 2026-04-28 Fixed in v0.0.18 CWE-497
TI-2026-46492 CVE-2026-65099 · GHSA-7862-v2gh-q6pf

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46489 CVE-2026-65096 · GHSA-4qrf-4qfq-jhwq

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46485 CVE-2026-65090 · GHSA-8q2v-mmc4-45wh

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46484 CVE-2026-65089 · GHSA-vr2c-6x8r-mc27

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46495 CVE-2026-65105 · GHSA-qmmp-67jr-x7g6

Missing authentication in NVIDIA NemoClaw

Priority LOW 36

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00486 Published 2026-08-25 No fix listed CWE-306
TI-2026-46477 CVE-2026-65082 · GHSA-9hcw-486j-wgc9

Code injection in NVIDIA NemoClaw

Priority LOW 35

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2026-08-25 No fix listed CWE-94
Priority LOW 27

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 a…

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00129 Published 2026-04-28 Fixed in v0.0.13 CWE-918
Priority LOW 26

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials .

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00151 Published 2026-08-25 No fix listed CWE-522
Open these records in search →