Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

TI-2026-46495 CVE-2026-65105 · GHSA-qmmp-67jr-x7g6

Missing authentication in NVIDIA NemoClaw

Priority LOW 36

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00486 Published 2026-08-25 No fix listed CWE-306
Priority LOW 26

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials .

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00151 Published 2026-08-25 No fix listed CWE-522
Priority MEDIUM 43

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2026-08-25 No fix listed CWE-295
TI-2026-46477 CVE-2026-65082 · GHSA-9hcw-486j-wgc9

Code injection in NVIDIA NemoClaw

Priority LOW 35

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2026-08-25 No fix listed CWE-94
TI-2026-46484 CVE-2026-65089 · GHSA-vr2c-6x8r-mc27

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46485 CVE-2026-65090 · GHSA-8q2v-mmc4-45wh

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46492 CVE-2026-65099 · GHSA-7862-v2gh-q6pf

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
TI-2026-46491 CVE-2026-65098 · GHSA-8jwf-vh22-q934

Weak authentication in NVIDIA NemoClaw

Priority MEDIUM 45

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2026-08-25 No fix listed CWE-1390
TI-2026-46489 CVE-2026-65096 · GHSA-4qrf-4qfq-jhwq

OS command injection in NVIDIA NemoClaw

Priority LOW 39

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01339 Published 2026-08-25 No fix listed CWE-78
Priority LOW 27

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 a…

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00129 Published 2026-04-28 Fixed in v0.0.13 CWE-918
Priority MEDIUM 43

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read a…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00395 Published 2026-04-28 Fixed in v0.0.18 CWE-497