CVE-2026-65098: Critical severity Nvidia NemoClaw for Linux vulnerability
Published Aug 25, 2026
·Updated
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
Affected Software
3 affected components
Nvidia NemoClaw for Linux
All of the following
Nvidia NeMoClaw<=0.0.4
Linux Linux kernel
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Can this be exploited remotely without credentials or user interaction?
The CVSS vector indicates network access is required, with no privileges or user interaction required. Exploitation has high attack complexity.
2
Does successful exploitation cross into another security authority?
No scope change is indicated by the CVSS vector. The reported confidentiality, integrity, and availability impacts are all rated high within the affected security authority.