NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

CVE-2026-65096 is a high-severity vulnerability in NVIDIA NemoClaw for Linux affecting the Telegram bridge component. The flaw allows an attacker to perform OS command injection, potentially leading to arbitrary code execution on the affected system. Successful exploitation could also result in privilege escalation, information disclosure, and data tampering. The vulnerability is specific to the Linux version of the product. NVIDIA has published a security advisory referencing this CVE. The issue is tracked in NVIDIA's product security repository under the 2026/5872 path. No active exploitation details are currently mentioned, but the potential impact is significant given the range of consequences described.