CVE-2026-24222 | BDVDB-2026-329458 Detail
NVIDIANemoClaw
Description#
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.
Impact#
Information disclosure
Weaknesses#
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.