Threat database

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA NemoClaw for Linux has a vulnerability in its inference server setup that allows remote attackers to access the inference service without authentication. This can lead to unauthorized information disclosure and denial of service. The vulnerability is identified as CWE-306, indicating missing authentication for a critical function. The CVSS score is 8.1, reflecting high severity. No patch or official remediation has been confirmed yet. There are no known exploits in the wild at this time.

NVIDIA NemoClaw has a vulnerability (CVE-2026-65088) involving the invocation of a process using visible sensitive information. Exploiting this flaw could lead to unauthorized disclosure of sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. No affected versions or patch information are provided, and there are no known exploits in the wild.

NVIDIA NemoClaw has a vulnerability identified as CVE-2026-65087 involving insufficiently protected credentials. This flaw could allow an attacker with limited privileges and user interaction to cause information disclosure and data tampering. The vulnerability has a medium severity rating with a CVSS score of 5.6. No affected versions or patch information are provided in the available data.

NVIDIA OpenShell for Linux has a vulnerability in its sandbox exec handler that allows OS command injection. Exploiting this flaw could enable an attacker to execute arbitrary code, disclose sensitive information, or tamper with data. The vulnerability has a medium severity rating with a CVSS score of 6.8. No affected versions or patches are explicitly stated in the available data.

NVIDIA OpenShell for Linux has a vulnerability in its inference proxy involving improper encoding or escaping of output. This flaw could allow an attacker with local privileges to cause information disclosure and data tampering. The vulnerability has a medium severity rating with a CVSS score of 5.2. No affected versions or patches are explicitly stated in the available data.

NVIDIA NemoClaw for Linux has a vulnerability involving improper certificate validation during its deployment process. Exploiting this flaw could allow attackers to disclose information, tamper with data, execute code, and escalate privileges. The vulnerability is tracked as CVE-2026-65084 and is rated with a high severity CVSS score of 8.1. No patch or official remediation guidance has been provided yet. There are no known exploits in the wild at this time.

CVE-2026-65083 is a critical vulnerability in NVIDIA OpenShell for Linux involving an incomplete list of disallowed inputs in its sandbox provisioning API. This flaw could allow an attacker to execute code, escalate privileges, disclose information, tamper with data, or cause denial of service. The vulnerability has a high CVSS score of 9.9, indicating severe impact. No affected versions or patch information are currently provided. No known exploits in the wild have been reported.

NVIDIA NemoClaw for Linux has a vulnerability in its migration command that allows a local attacker to perform code injection. Exploiting this flaw could lead to code execution, data tampering, information disclosure, and denial of service. The vulnerability is identified as CWE-94 and has a high severity with a CVSS score of 7. No patch or official remediation has been confirmed yet.

NVIDIA NemoClaw for Linux has a vulnerability in its installation process that allows execution of untrusted code. Exploiting this flaw could lead to code execution, privilege escalation, data tampering, information disclosure, and denial of service. The vulnerability is identified as CWE-494, involving download of code without integrity checks. No patch or official remediation has been announced yet.

NVIDIA NemoClaw for Linux has an OS command injection vulnerability in its status and logs plugin commands. This flaw could allow an attacker with local privileges to execute arbitrary OS commands, potentially leading to code execution, data tampering, information disclosure, and denial of service. The vulnerability is tracked as CVE-2026-65089 with a high severity rating and a CVSS score of 7.8. No patch or official remediation has been confirmed yet.

NVIDIA NemoClaw for Linux has an OS command injection vulnerability in its NIM management component. This flaw allows an attacker with local privileges to execute arbitrary OS commands, potentially leading to code execution, data tampering, information disclosure, and denial of service. The vulnerability is rated high severity with a CVSS score of 7.8. No patch or official remediation guidance is currently available, and no known exploits are reported in the wild.

NVIDIA NemoClaw for Linux has a vulnerability in its command-line interface that allows OS command injection. Exploiting this flaw could enable attackers to execute arbitrary code, tamper with data, disclose sensitive information, or cause denial of service. The vulnerability is identified as CVE-2026-65099 with a high severity score of 7.8. No specific affected versions or patches have been disclosed yet.

NVIDIA NemoClaw for Linux has a vulnerability in its remote-access helper workflow that results in weak authentication. Exploiting this flaw could allow an attacker to execute code, disclose information, and tamper with data. The vulnerability is identified as CWE-1390 and carries a high severity with a CVSS score of 8.1. No patch or official remediation guidance has been provided yet. There are no known exploits in the wild at this time.