CVE-2026-65105: High severity Nvidia NeMoClaw vulnerability
Published Aug 25, 2026
·Updated
NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service.
Affected Software
3 affected components
Nvidia NeMoClaw
All of the following
Nvidia NeMoClaw<=0.0.25
Linux Linux kernel
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What network access does an attacker need to exploit this issue?
The attacker needs network access to the inference service. No authentication or user interaction is required.
2
What impact can successful exploitation have?
An attacker may obtain information from the inference service and cause a denial of service. The provided vector indicates high confidentiality and availability impact, with no integrity impact stated.