NemoClaw vulnerabilities
11 known vulnerabilities in NemoClaw from NVIDIA. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
NemoClaw: Missing Authentication for Critical Functionality
NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of servi
- 7.8 High severity
NemoClaw: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of
- 9.8 Critical severity
NemoClaw: Weak Authentication
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.
- 8.8 High severity
NemoClaw: Download of Code Without Integrity Check
NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, informa
- 7.8 High severity
NemoClaw: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosur
- 7.8 High severity
NemoClaw: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial
- 7.8 High severity
NemoClaw: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and
- 9.8 Critical severity
NemoClaw: Improper Certificate Validation
NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and es
- 7.8 High severity
NemoClaw: Improper Control of Generation of Code
NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of servi
- 9.8 Critical severity
NemoClaw: Download of Code Without Integrity Check
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, inform
- 8.6 High severity
NemoClaw: Exposure of Sensitive System Information to an Unauthorized Control Sphere
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables