Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-24222

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA NemoClaw

Default version status: unaffected

  • All versions prior to v0.0.18affected

References