CVE-2026-65099: OS Command Injection

Published Aug 25, 2026

Updated

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

Affected Software

1 affected component

Nvidia NemoClaw for Linux

Event History

Aug 25, 2026

CVE Published

via MITRE·08:15 PM

Data Sourced

via MITRE·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems running NVIDIA NemoClaw for Linux are in scope. The vulnerability is in the command-line interface, so exposure depends on whether a local user with existing privileges can invoke that interface.

What access does an attacker need to exploit it?

The CVSS vector indicates local attack access and low privileges are required. No user interaction is required, and successful exploitation may allow OS command execution with resulting data tampering, information disclosure, or denial of service.

CVE-2026-65099: OS Command Injection

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need to exploit it?