Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA NemoClaw

Default version status: unaffected

  • All versions prior to v0.0.13affected

References