Executive brief
NVIDIA NemoClaw for Linux is a software installation package that contains a vulnerability allowing attackers to execute untrusted code during the installation process. A successful attack could lead to complete system compromise, including unauthorized code execution, privilege escalation, data tampering, information disclosure, and service disruption.
Technical details
The vulnerability exists in NVIDIA NemoClaw for Linux's installation process, where insufficient validation or insufficient isolation during setup allows an attacker to inject and execute arbitrary code. The attack vector appears to be local or adjacent network access during the installation phase. A successful exploit could result in arbitrary code execution with elevated privileges, data tampering, information disclosure, and denial of service. Affected users should apply security updates from NVIDIA when available.
Affected products
- NVIDIA NemoClaw for Linux <UNKNOWN>
Timeline
- 2026-08-25: disclosed