CVE-2026-65090: OS Command Injection
Published Aug 25, 2026
·Updated
NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
Affected Software
3 affected components
Nvidia NemoClaw for Linux
All of the following
Nvidia NeMoClaw<=0.0.17
Linux Linux kernel
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. User interaction is not required.
2
What could an attacker achieve after successful exploitation?
Successful exploitation may allow OS command execution and can result in data tampering, information disclosure, and denial of service. The CVSS vector rates confidentiality, integrity, and availability impact as high.
3
Is this exploitable remotely over the network?
The provided CVSS vector lists the attack vector as local. The available information does not indicate network-based exploitation.