CVE-2026-65098

Published: Aug 25, 2026Modified: Sep 1, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

Affected (1)

Products: Nvidia: Nemoclaw

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Nemoclaw	Up to 0.0.4

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

Weak Authentication

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5872

Source: psirt@nvidia.com

Patch

https://nvd.nist.gov/vuln/detail/CVE-2026-65098

Source: psirt@nvidia.com

US Government Resource

https://www.cve.org/CVERecord?id=CVE-2026-65098

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.