Improper Access Control Vulnerability in NVIDIA NeMoClaw

CVE-2026-24222

What is CVE-2026-24222?

NVIDIA NeMoClaw features a vulnerability in its sandbox environment initialization component. This flaw can be exploited by remote attackers who send specially crafted prompt-injected content. Such actions may lead to improper access control, allowing attackers to read and exfiltrate environment variables that are not appropriately restricted during the sandbox creation process. If successfully exploited, this vulnerability could result in significant information disclosure, posing risks to sensitive data.

References