Loading story…
NVIDIA issued security advisories covering vulnerabilities in NemoClaw, OpenShell, NVIDIA Unified Fabric Manager, and NVIDIA DGX Spark. The notices identify multiple affected versions and models of NemoClaw, OpenShell, and Unified Fabric Manager; DGX Spark releases earlier than version 1.110.13 are affected.
NVIDIA and the Guyana National CIRT urged administrators to review the applicable NVIDIA security bulletins and deploy relevant updates. The available advisories do not disclose CVE identifiers, vulnerability classes, severity ratings, exploitation status, or full fixed-version details beyond the DGX Spark 1.110.13 threshold.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
Security advisory AV26-849 identified security issues affecting multiple NVIDIA products, including multiple Unified Fabric Manager versions and DGX Spark versions before 1.110.13.
NVIDIA published security advisories covering vulnerabilities affecting NVIDIA NemoClaw, OpenShell, Unified Fabric Manager, and DGX Spark. DGX Spark releases earlier than version 1.110.13 were listed as affected; the supplied material did not identify CVEs, severity, or exploitation status.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
NVIDIA published Security Bulletin 5872 covering **19 CVEs** in its NemoClaw and OpenShell products, including identifiers from `CVE-2026-65081` through `CVE-2026-65093`, `CVE-2026-65096` through `CVE-2026-65099`, and `CVE-2026-65105`. The published bulletin repository provides CSAF and Markdown versions of the advisory, although the available directory listing does not disclose technical details, remediation guidance, or exploitation status for all listed flaws. Two disclosed high-severity issues are `CVE-2026-65091`, an OS command-injection flaw affecting NVIDIA OpenShell through version 0.0.33 on all platforms, and `CVE-2026-65105`, a missing-authentication flaw in the NemoClaw Linux inference-server setup affecting versions 0 through 0.0.25. A malicious gateway could exploit the OpenShell issue over the network with user interaction to execute commands, tamper with data, or disclose information (CVSS 8.8), while an unauthenticated remote attacker could access an affected NemoClaw inference service and cause information disclosure or denial of service (CVSS 8.1).
Aug 26, 2026
NVIDIA disclosed multiple vulnerabilities affecting **Triton Inference Server**, **Cumulus Linux GA/LTS**, and **NVOS**, prompting national cyber agencies to issue follow-on advisories directing administrators to review vendor bulletins and deploy fixes. The Canadian Centre for Cyber Security and Guyana National CIRT both said the issues were identified in NVIDIA products and emphasized that the notice is a vendor security advisory rather than a report of active exploitation. Affected versions include Triton Inference Server releases prior to **`0.0-26.05`** and NVOS releases prior to **`25.0.2.4438`** and **`25.0.2.6077`**, while Cumulus Linux GA/LTS is also listed as impacted across multiple versions. NVIDIA’s product security and support bulletins were cited as the authoritative remediation source, and organizations using the affected platforms were urged to verify version exposure and apply available updates as they become available.
Aug 21, 2026
NVIDIA DGX Spark GB10 systems are affected by two critical vulnerabilities, CVE-2025-33187 and CVE-2025-33188, which could allow attackers to escalate privileges and manipulate hardware controls. CVE-2025-33187 is a critical flaw in the SROOT component, enabling attackers with privileged access to gain entry to SoC protected areas, potentially resulting in code execution, information disclosure, data tampering, denial of service, or further privilege escalation. CVE-2025-33188 involves hardware resource manipulation, where successful exploitation could lead to information disclosure, data tampering, or denial of service. Both vulnerabilities are not remotely exploitable but pose significant risks if local access is obtained. NVIDIA has released critical patches to address these vulnerabilities, with CVE-2025-33187 carrying a CVSS score of 9.3 and CVE-2025-33188 rated at 8.0. Organizations using NVIDIA DGX Spark hardware are urged to apply the updates immediately to mitigate the risk of exploitation. The vulnerabilities highlight the importance of securing AI infrastructure, as exploitation could expose sensitive AI secrets and compromise system integrity. No affected product versions have been explicitly listed, but the advisories emphasize the urgency of remediation for all DGX Spark GB10 deployments.
Jun 29, 2026