CVE-2026-65081

Analyzed Analyzed - Analysis Complete

NemoClaw for Linux Code Execution Vulnerability

Publication date: 2026-08-25

Last updated on: 2026-09-01

Assigner: NVIDIA Corporation

Description

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-09-01

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-65081

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	nemoclaw	to 0.0.21 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-494	The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

Attack-Flow Graph

Executive Summary

NVIDIA NemoClaw for Linux has a vulnerability in its installation process that allows an attacker to execute untrusted code. This could lead to unauthorized code execution, privilege escalation, data tampering, information disclosure, and denial of service.

Detection Guidance

Detection of CVE-2026-65081 requires checking for untrusted code execution during NemoClaw installation. Review installation logs for unexpected scripts or binaries. Verify file integrity of installed components against NVIDIA's official packages. Monitor system for unusual privilege escalation or tampering.

Impact Analysis

This vulnerability could allow attackers to run malicious code on your system, gain higher privileges, alter or steal data, expose sensitive information, or disrupt services by causing a system crash.

Compliance Impact

This vulnerability could lead to code execution, privilege escalation, data tampering, information disclosure, and denial of service. Such impacts may violate compliance requirements under GDPR (e.g., unauthorized data access or disclosure) and HIPAA (e.g., unauthorized access to protected health information).

Mitigation Strategies

Update NVIDIA NemoClaw to the latest version to address the installation process vulnerability. Verify the integrity of installed files and restrict write permissions to trusted users only.

Hi! I’m here to help you understand CVE-2026-65081. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70