CVE-2026-65097

Analyzed Analyzed - Analysis Complete

NemoClaw Linux Privilege Escalation via Unverified Download

Publication date: 2026-08-25

Last updated on: 2026-09-01

Assigner: NVIDIA Corporation

Description

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-09-01

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-14

NVD

CVE-2026-65097

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	nemoclaw	to 0.0.21 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-494	The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

Attack-Flow Graph

Executive Summary

NVIDIA NemoClaw for Linux has a flaw in its installation scripts where an attacker could trick the system into downloading code without verifying its integrity. This could allow the attacker to execute malicious code, gain higher privileges, steal information, or alter data.

Detection Guidance

To detect this vulnerability, inspect NVIDIA NemoClaw installation scripts for unauthorized downloads or integrity checks. Check for unexpected network connections during installation and verify file hashes of downloaded components. Review system logs for unusual privilege escalation or code execution events.

Impact Analysis

If exploited, this vulnerability could let attackers run unauthorized code on your system, steal sensitive data, or modify files. It may also allow privilege escalation, giving attackers more control over your system.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health information privacy). Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update NVIDIA NemoClaw to the latest version that addresses the integrity check issue in installation scripts. Verify the integrity of downloaded files using checksums or signatures before installation. Restrict network access to systems running NemoClaw to minimize exposure.

Hi! I’m here to help you understand CVE-2026-65097. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70