NemoClaw for Linux Code Execution Vulnerability

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: NVIDIA Corporation

Description

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-65081

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	nemoclaw	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-494	The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

Attack-Flow Graph

Executive Summary

NVIDIA NemoClaw for Linux has a vulnerability in its installation process that allows an attacker to execute untrusted code. This could lead to unauthorized code execution, privilege escalation, data tampering, information disclosure, and denial of service.

Impact Analysis

This vulnerability could allow attackers to run malicious code on your system, gain higher privileges, alter or steal data, expose sensitive information, or disrupt services by causing a system crash.

Mitigation Strategies

Update NVIDIA NemoClaw to the latest version to address the installation process vulnerability. Verify the integrity of installed files and restrict write permissions to trusted users only.

Hi! I’m here to help you understand CVE-2026-65081. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70