CVE-2026-65096: OS Command Injection
NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates local attack access and low privileges are required. No user interaction is required.
Which deployments are exposed?
The issue is identified in the Telegram bridge component of NVIDIA NemoClaw for Linux. The provided information does not identify affected versions or state whether the component is enabled by default.
What could a successful exploit allow?
Successful OS command injection could lead to code execution, privilege escalation, information disclosure, and data tampering. The CVSS impact ratings indicate high impact to confidentiality, integrity, and availability.