This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-24222 | BDVDB-2026-329458 Detail

NVIDIANemoClaw

Description#

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.

Impact#

Information disclosure

Weaknesses#

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.