CVE-2026-65097

8.8 Élevée

Publiée le 25/08/2026 à 23:17 · Modifiée le 01/09/2026 à 18:26 · Analysée par le NVD · Source : psirt@nvidia.com

Description

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

Traduire en français

Produits concernés

NVIDIA NemoClaw

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	psirt@nvidia.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H`
3.1	8.8 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-494

Références

https://github.com/NVIDIA/product-security/tree/main/2026/5872 Patch
https://nvd.nist.gov/vuln/detail/CVE-2026-65097 US Government Resource
https://www.cve.org/CVERecord?id=CVE-2026-65097 Third Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories