CVE-2026-65089: OS Command Injection
Published Aug 25, 2026
·Updated
NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
Affected Software
3 affected components
Nvidia NemoClaw for Linux
All of the following
Nvidia NeMoClaw<=0.0.3
Linux Linux kernel
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required for exploitation.