CVE Feed

    Dashboard / CVE / CVE-2026-24222

    CVE-2026-24222

    NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.

    Published:Apr 28, 2026
    Last Modified:May 4, 2026
    EPS:Apr 28, 2026
    EPSS Score:0.00052
    CVSS Score:8.6

    Affected Products

    Vendor
    Nvidia
    Product
    Nemoclaw

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-170 Web Application Fingerprinting
    CAPEC-694 System Location Discovery

    Related CVEs

    CVE-2026-65105 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may …
    CVE-2026-65088 (CVSS 5.5) — NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sen…
    CVE-2026-65087 (CVSS 5.6) — NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . …
    CVE-2026-65084 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause im…
    CVE-2026-65082 (CVSS 7) — NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could caus…
    CVE-2026-65081 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause …
    CVE-2026-65089 (CVSS 7.8) — NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker c…
    CVE-2026-65090 (CVSS 7.8) — NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could ca…
    CVE-2026-65099 (CVSS 7.8) — NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could caus…
    CVE-2026-65098 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker cou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High