NVIDIA NemoClaw and OpenShell: CVE-2026-65093 (CVSS 9.9) Enables Code Execution

TL;DR

NVIDIA released a software update for NemoClaw and OpenShell. It fixes 20 vulnerabilities, including two critical flaws scored CVSS 9.9. The worst, CVE-2026-65093, allows a sandbox escape leading to code execution. Update from the official GitHub repos now.

Notable CVEs

Why These NVIDIA Vulnerabilities Matter

NemoClaw and OpenShell support NVIDIA’s AI tooling on Linux. Many teams run them close to sensitive models and data. This NVIDIA vulnerability set therefore reaches high-value systems.

Two flaws hit the maximum-adjacent 9.9 score. Because they enable code execution, the stakes are high. NVIDIA delivers fixes through its GitHub repositories rather than a driver installer.

How the Attacks Work

Critical Sandbox Flaws

The top bug, CVE-2026-65093, is a sandbox escape in OpenShell for Linux. NVIDIA warns a successful exploit might lead to code execution, escalation of privileges, data tampering, and information disclosure. The second critical, CVE-2026-65083, stems from an incomplete list of disallowed inputs in the sandbox provisioning API.

Command Injection and Weak Authentication

Many High-severity bugs involve OS command injection. For example, CVE-2026-65091 lets a malicious gateway inject commands across all OpenShell platforms. Several NemoClaw components share this weakness, including its Telegram bridge and command-line interface.

Other flaws weaken trust checks. CVE-2026-65098 involves weak authentication in a remote-access helper. CVE-2026-65105 may let a remote attacker reach the inference service without authentication.

Is It Being Exploited?

No exploitation in the wild has been confirmed. NVIDIA reports no active attacks. Likewise, no public proof-of-concept exists yet.

Affected Versions

OpenShell versions 0 through 0.0.33 are affected on all platforms. NemoClaw for Linux is affected across several component versions, up to builds like 0.0.25, 0.0.21, and 0.0.17.

Patch and Mitigation Steps

Update OpenShell to v0.0.34 from the official repo. For NemoClaw, clone or pull the fixed component builds listed by NVIDIA. The full table appears in the NVIDIA security bulletin. Since fixes ship through GitHub, verify you track the correct NVIDIA/NemoClaw and NVIDIA/OpenShell repositories.

Support Our Threat Intelligence

Find our zero-day alerts and CVE reports helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.