Loading story…
NVIDIA published Security Bulletin 5872 covering 19 CVEs in its NemoClaw and OpenShell products, including identifiers from CVE-2026-65081 through CVE-2026-65093, CVE-2026-65096 through CVE-2026-65099, and CVE-2026-65105. The published bulletin repository provides CSAF and Markdown versions of the advisory, although the available directory listing does not disclose technical details, remediation guidance, or exploitation status for all listed flaws.
Two disclosed high-severity issues are CVE-2026-65091, an OS command-injection flaw affecting NVIDIA OpenShell through version 0.0.33 on all platforms, and CVE-2026-65105, a missing-authentication flaw in the NemoClaw Linux inference-server setup affecting versions 0 through 0.0.25. A malicious gateway could exploit the OpenShell issue over the network with user interaction to execute commands, tamper with data, or disclose information (CVSS 8.8), while an unauthenticated remote attacker could access an affected NemoClaw inference service and cause information disclosure or denial of service (CVSS 8.1).
Track how attackers are adapting to this technology.
4 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued advisory AV26-849, identifying vulnerabilities affecting NVIDIA Unified Fabric Manager and NVIDIA DGX Spark versions earlier than 1.110.13, in addition to NemoClaw and OpenShell. It advised administrators to review NVIDIA's August 2026 bulletins and apply required updates when available.
CVE-2026-65105 was published as a high-severity missing-authentication flaw in the NVIDIA NemoClaw inference-server setup for Linux, affecting versions through 0.0.25. Remote unauthenticated attackers could access the inference service, potentially causing information disclosure or denial of service.
CVE-2026-65091 was published as a high-severity OS command-injection vulnerability affecting NVIDIA OpenShell versions through 0.0.33. A malicious gateway could exploit the issue to enable code execution, data tampering, or information disclosure.
NVIDIA published Security Bulletin 5872, “NVIDIA NemoClaw and OpenShell - August 2026,” listing 19 associated CVEs, including CVE-2026-65091 and CVE-2026-65105.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
4 references tracked. Mallory keeps watching after this page renders.
cyber.gc.ca
Open sourcecve.org
Open sourcecve.org
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
NVIDIA issued security advisories covering vulnerabilities in **NemoClaw**, **OpenShell**, **NVIDIA Unified Fabric Manager**, and **NVIDIA DGX Spark**. The notices identify multiple affected versions and models of NemoClaw, OpenShell, and Unified Fabric Manager; DGX Spark releases earlier than version `1.110.13` are affected. NVIDIA and the Guyana National CIRT urged administrators to review the applicable NVIDIA security bulletins and deploy relevant updates. The available advisories do not disclose CVE identifiers, vulnerability classes, severity ratings, exploitation status, or full fixed-version details beyond the DGX Spark `1.110.13` threshold.
Aug 26, 2026
NVIDIA disclosed Security Bulletin **5865** for **NVIDIA Triton Inference Server**, publishing advisory materials and associated MITRE-format CVE records for five vulnerabilities: `CVE-2026-47606`, `CVE-2026-47627`, `CVE-2026-47628`, `CVE-2026-47629`, and `CVE-2026-47630`. The bulletin was released through NVIDIA's product-security repository with CSAF, Markdown, checksum, and CVE JSON files, indicating a coordinated vendor advisory covering multiple issues in the inference-serving platform. The most severe issue publicly detailed is **`CVE-2026-47627`**, a **critical** path traversal vulnerability (`CWE-22`) affecting **NVIDIA Triton Inference Server on Linux** in versions **0.0 through 26.05**. The CVE record assigns a **CVSS v3.1 score of 9.8** with vector `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, and NVIDIA states that successful exploitation could lead to **denial of service**.
Aug 18, 2026
NVIDIA issued security updates for multiple products across its AI and enterprise software stack, fixing vulnerabilities that could allow **remote code execution**, denial of service, privilege escalation, data tampering, and information disclosure. The most severe issue disclosed in its broader March advisories was `CVE-2025-33244` in **NVIDIA Apex**, a widely used PyTorch extension for mixed-precision and distributed training. High-severity flaws were also addressed in **Triton Inference Server**, **Megatron LM**, **NeMo Framework**, and **Model Optimizer**, with NVIDIA warning that exploitation could disrupt AI workloads, expose sensitive training data, or enable unauthorized access. Medium-severity issues were additionally listed in **VIRTIO-Net**, **SNAP4**, and **B300 MCU**. NVIDIA later released urgent fixes for **TensorRT-LLM** and **Isaac Launchable**, including TensorRT-LLM deserialization flaws in MPI server and RPC testing components that could lead to RCE, data manipulation, information disclosure, or service outages. It also patched a Linux issue in Isaac Launchable involving sensitive information sent in clear text, creating risks of privilege escalation and system disruption. NVIDIA advised customers to upgrade **TensorRT-LLM** to `1.2.1` or later, and said organizations running multi-GPU deployments should use: ```bash trtllm-llmapi-launch ``` to reduce network exposure. The company has also begun publishing PSIRT bulletins on GitHub in Markdown and CSAF formats to support automated vulnerability management and faster remediation.
Jun 29, 2026