NVIDIA NemoClaw Linux Install Script Lacks Integrity, May Allow Code Exec
CVE-2026-65097 Published on August 25, 2026

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

NVD

Vulnerability Analysis

CVE-2026-65097 can be exploited with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.


Products Associated with CVE-2026-65097

Want to know whenever a new CVE is published for NVIDIA Nemo? stack.watch will email you.

NVIDIA Nemo
 

Affected Versions

NVIDIA NemoClaw Version 0 to 0.0.21 is affected by CVE-2026-65097