NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

CVE-2026-65090 is a vulnerability in NVIDIA NemoClaw for Linux affecting the NIM management component. The flaw allows an attacker to perform OS command injection through the affected component. Successful exploitation could lead to arbitrary code execution, data tampering, information disclosure, and denial of service. The vulnerability is rated as high severity. NVIDIA has published a security advisory through their product-security GitHub repository. The issue is tracked in both the NVD and CVE databases. No additional technical details or proof-of-concept exploits are currently disclosed in the article. Users of NVIDIA NemoClaw on Linux should monitor for patches and apply mitigations as soon as they become available.