Database/AI/ML frameworks & serving
NVIDIA NemoClaw: OS command injection through the command-line interface
Impact
The NemoClaw CLI builds an OS command from input it does not adequately sanitise, so a crafted argument or value executes as a shell command with the privileges of whoever runs the CLI. NVIDIA lists code execution, data tampering, information disclosure and denial of service. The practical risk on a GPU node is anything that invokes the CLI on behalf of someone else - a deployment script, a CI job, or an operator running it against tenant-supplied names or paths - because the injected command then runs at the caller's privilege rather than the submitter's. The record does not say the CLI is directly reachable by untrusted users; treat the injection point as whatever supplies its arguments.
Who can reach it
A local, low-privileged actor who can influence the arguments or input passed to the NemoClaw CLI (CVSS AV:L, PR:L). Authentication required.
What to do
Update NemoClaw from the NVIDIA/NemoClaw GitHub repo; versions 0 through 0.0.25 are affected per bulletin 5872, with the fixed build listed per CVE in that bulletin's Security Updates table. Replacing the CLI binary is enough for new invocations - nothing needs a reboot - but any long-running service or automation that shells out to it should be restarted so it picks up the new version.
References
Related entries
- NVIDIA DeepStream: crafted tensor dimensions in a YAML config trigger an integer overflowCVE-2026-65102 · NVIDIA DeepStream (tensor dimension parsing from a YAML configuration file)High
- NVIDIA Megatron-LM: malicious checkpoint files execute code when loadedCVE-2026-65110 · NVIDIA Megatron-LM (checkpoint loading)High
- NVIDIA NeMo Speech: code injection from malicious input, no user interaction neededCVE-2026-65111 · NVIDIA NeMo SpeechHigh
- NVIDIA Isaac Lab: eval injection allows code execution from attacker-influenced inputCVE-2026-65141 · NVIDIA Isaac LabHigh
- NVIDIA Model-Optimizer: deserialization of untrusted data leads to code executionCVE-2026-65142 · NVIDIA Model-Optimizer (model/checkpoint deserialization)High
- NVIDIA NeMo: a crafted model_config.yaml injects unsafe parameters into dataset loadingCVE-2026-65178 · NVIDIA NeMo (dataset-loading workflow, model_config.yaml parameter injection)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.