NVIDIA NemoClaw
Filed as: NeMoClaw
Newest record 2026-08-25 · 14 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for NVIDIA NemoClaw has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 14
- closed5.6NVIDIA NemoClaw CVE-2026-65087: Insufficiently protected credentials vulnerability in NVIDIA NemoClaw
Disclosed · since 25 Aug 2026 · CVE-2026-65087
AI - closed5.5NVIDIA NemoClaw CVE-2026-65088: Sensitive information disclosure vulnerability in NVIDIA NemoClaw
Disclosed · since 25 Aug 2026 · CVE-2026-65088
AI - closed8.1NVIDIA NemoClaw CVE-2026-65098: Remote-access vulnerability in NVIDIA NemoClaw
Disclosed · since 25 Aug 2026 · CVE-2026-65098
AI - closed7.0NVIDIA NemoClaw CVE-2026-65082: Code injection vulnerability in NVIDIA NemoClaw migration command
Disclosed · since 25 Aug 2026 · CVE-2026-65082
AI - closed8.1NVIDIA NemoClaw CVE-2026-65105: Unauthenticated access vulnerability in NVIDIA NemoClaw inference server
Disclosed · since 25 Aug 2026 · CVE-2026-65105
AI - closed7.8NVIDIA NemoClaw CVE-2026-65099: OS command injection vulnerability in NVIDIA NemoClaw CLI
Disclosed · since 25 Aug 2026 · CVE-2026-65099
AI - closed7.8NVIDIA NemoClaw CVE-2026-65090: OS command injection vulnerability in NVIDIA NemoClaw NIM management
Disclosed · since 25 Aug 2026 · CVE-2026-65090
AI - closed7.8NVIDIA NemoClaw CVE-2026-65089: OS command injection vulnerability in NVIDIA NemoClaw
Disclosed · since 25 Aug 2026 · CVE-2026-65089
AI - closed7.8NVIDIA NemoClaw CVE-2026-65096: NVIDIA NemoClaw Telegram bridge OS command injection
Disclosed · since 25 Aug 2026 · CVE-2026-65096
AI - closed8.1NVIDIA NemoClaw CVE-2026-65084: NVIDIA NemoClaw improper certificate validation
Disclosed · since 25 Aug 2026 · CVE-2026-65084
AI - closed7.5NVIDIA NemoClaw CVE-2026-65097: NVIDIA NemoClaw insecure code download vulnerability
Disclosed · since 25 Aug 2026 · CVE-2026-65097
AI - closed8.1NVIDIA NemoClaw CVE-2026-65081: NVIDIA NemoClaw installation untrusted code execution
Disclosed · since 25 Aug 2026 · CVE-2026-65081
AI - closed6.3NVIDIA NemoClaw NVIDIA NeMoClaw validateEndpointUrl SSRF vulnerability
Disclosed · since 28 Apr 2026 · CVE-2026-24231
AI - closed8.6NVIDIA NemoClaw NVIDIA NeMoClaw sandbox initialization access control vulnerability
Disclosed · since 28 Apr 2026 · CVE-2026-24222
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.