AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

NvidiaCVE-2026-65097

Nvidia NemoClaw: code execution

Nvidia

CVE-2026-65097 · Published Aug 25, 2026 · updated Sep 1, 2026

High7.5
No fix yet
Nvidia advisory

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Affected versions

PackageAffectedFixed in
NemoClaw
Product
<= 0 to 0.0.21No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-494

More Nvidia advisories

All Nvidia
Medium 6.9Aug 25Bundled CloudXR libPoco.so statically links libexpat 2.8.1 (CVE-2026-56132 + CVE-2026-56403..56409)CVE-2026-56132no fix yetHigh 8.8Aug 25Nvidia OpenShell: command injectionCVE-2026-65091no fix yetHigh 8.5Aug 25Nvidia OpenShell: path traversalCVE-2026-65092no fix yetCritical 9.9Aug 25Nvidia OpenShell: code executionCVE-2026-65093no fix yetHigh 7.8Aug 25Nvidia NemoClaw: command injectionCVE-2026-65096no fix yetHigh 8.1Aug 25Nvidia NemoClaw: remote code executionCVE-2026-65098no fix yet