CVE Feed

    Dashboard / CVE / CVE-2026-24231

    CVE-2026-24231

    NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.

    Published:Apr 28, 2026
    Last Modified:May 4, 2026
    EPS:Apr 28, 2026
    EPSS Score:0.00013
    CVSS Score:6.3

    Affected Products

    Vendor
    Nvidia
    Product
    Nemoclaw

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2026-65105 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may …
    CVE-2026-65088 (CVSS 5.5) — NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sen…
    CVE-2026-65087 (CVSS 5.6) — NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . …
    CVE-2026-65084 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause im…
    CVE-2026-65082 (CVSS 7) — NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could caus…
    CVE-2026-65081 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause …
    CVE-2026-65089 (CVSS 7.8) — NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker c…
    CVE-2026-65090 (CVSS 7.8) — NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could ca…
    CVE-2026-65099 (CVSS 7.8) — NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could caus…
    CVE-2026-65098 (CVSS 8.1) — NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker cou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High