Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

NVIDIA NemoClaw Linux may accept fake certificates

CVE-2026-65084 · published 9 days ago
Summary

The Linux version of NVIDIA NemoClaw can be tricked during installation into trusting invalid security certificates. This could let an attacker see sensitive information, alter data, run unauthorized code, or gain higher system privileges. Apply the latest security update from NVIDIA as soon as possible to fix the certificate check.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nvidia nemoclaw 0 to 0.0.1
0.0.1
Original advisory text
NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to...
NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and escalation of privileges.
References
Severity
9.8 Critical
CVSS 3.1: 8.1 (MITRE)
Exploitation
EPSS <1%
Type
CWE-295Improper Certificate Validation
Timeline
Published25 Aug 2026
Updated2 Sep 2026
First seen26 Aug 2026
Sources
CVE-2026-65084 · NVD
CVE-2026-65084 · MITRE
Monitor software like this
Free during beta