NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

CVE-2026-65099 is a vulnerability in NVIDIA NemoClaw for Linux affecting its command-line interface. The flaw allows an attacker to perform OS command injection through the CLI. Successful exploitation can lead to arbitrary code execution on the affected system. Additionally, the vulnerability may result in data tampering, undermining data integrity. Information disclosure is also a potential consequence, exposing sensitive data. Denial of service attacks are possible, disrupting system availability. NVIDIA has published an advisory on their product-security GitHub repository. The vulnerability is tracked on both NVD and CVE.org. No active exploitation details are mentioned in the advisory at this time.