CVE-2026-65099: OS Command Injection
Published Aug 25, 2026
·Updated
NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.
Affected Software
3 affected components
Nvidia NemoClaw for Linux
All of the following
Nvidia NeMoClaw=0.0.1
Linux Linux kernel
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who is realistically exposed to this issue?
Systems running NVIDIA NemoClaw for Linux are in scope. The vulnerability is in the command-line interface, so exposure depends on whether a local user with existing privileges can invoke that interface.
2
What access does an attacker need to exploit it?
The CVSS vector indicates local attack access and low privileges are required. No user interaction is required, and successful exploitation may allow OS command execution with resulting data tampering, information disclosure, or denial of service.