Auth bypass in NVIDIA Nemoclaw
CVE-2026-65105
NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service.
Vulnerability class: Broken Authentication
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Nvidia Nemoclaw — versions 0 to 0.0.25
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-65105?
- CVE-2026-65105 is a high-severity vulnerability in NVIDIA Nemoclaw, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2026-08-25.
- How severe is CVE-2026-65105?
- High severity. CVSS v3 base score is 8.1 out of 10.