CVE-2026-65088

Analyzed Analyzed - Analysis Complete

Information Disclosure in NVIDIA NemoClaw

Publication date: 2026-08-25

Last updated on: 2026-09-01

Assigner: NVIDIA Corporation

Description

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-09-01

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-65088

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	nemoclaw	to 0.0.17 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-214	A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

Attack-Flow Graph

Executive Summary

NVIDIA NemoClaw has a vulnerability that allows an attacker to access sensitive information by exploiting visible data during process invocation. This could lead to unauthorized information disclosure.

Impact Analysis

An attacker could exploit this to read sensitive data processed by NemoClaw, potentially exposing confidential information like user credentials or proprietary data.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by exposing personal or health data, resulting in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Update NVIDIA NemoClaw to the latest patched version as soon as it becomes available to address the information disclosure vulnerability.

Hi! I’m here to help you understand CVE-2026-65088. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70