Local Code Injection Vulnerability in NVIDIA NemoClaw for Linux
CVE-2026-65082

7HIGH

Key Information:

Vendor

Nvidia
Status
Nemoclaw
Vendor
CVE Published:
25 August 2026

What is CVE-2026-65082?

NVIDIA NemoClaw for Linux has a vulnerability in its migration command that allows local attackers to inject code. Exploiting this issue can result in unauthorized code execution, potential manipulation of data, exposure of sensitive information, and even denial of service to legitimate users. It is crucial for users of NemoClaw to implement necessary security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

NemoClaw Linux 0 to 0.0.17

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65082
https://www.cve.org/CVERecord?id=CVE-2026-65082
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.