OS Command Injection Vulnerability in NVIDIA NemoClaw for Linux
CVE-2026-65096

7.8HIGH

Key Information:

Vendor

Nvidia

Status
Vendor
CVE Published:
25 August 2026

What is CVE-2026-65096?

NVIDIA NemoClaw for Linux features a vulnerability in its Telegram bridge component, which can be exploited through an OS command injection attack. Attackers may leverage this flaw to execute arbitrary code, escalate privileges, disclose sensitive information, and manipulate data within the affected systems. Adequate security measures should be implemented to mitigate risks associated with this vulnerability.

Affected Version(s)

NemoClaw Linux 0 to 0.0.1

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.