CVE-2026-24222

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24222	US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5837	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24222	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:nemoclaw:*:*:*:*:*:*:*:*

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA NeMoClaw contiene una vulnerabilidad en el componente de inicialización del entorno sandbox, donde un atacante remoto podría causar un control de acceso inadecuado al enviar contenido inyectado en el prompt que provoca que el agente lea y exfiltre variables de entorno del host no restringidas adecuadamente durante la creación del sandbox. Un exploit exitoso de esta vulnerabilidad podría conducir a la revelación de información.

Information

Published : 2026-04-28 19:36

Updated : 2026-10-26 20:10

NVD link : CVE-2026-24222

Mitre link : CVE-2026-24222

CVE.ORG link : CVE-2026-24222

JSON object : View

Products Affected

nvidia

nemoclaw

CWE

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

{"id": "CVE-2026-24222", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24222", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-29T13:51:53.035168Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "NemoClaw", "versions": [{"status": "affected", "version": "All versions prior to v0.0.18"}], "platforms": ["All"], "defaultStatus": "unaffected"}]}], "published": "2026-04-28T19:36:45.517", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24222", "tags": ["US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5837", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24222", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-497"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure."}, {"lang": "es", "value": "NVIDIA NeMoClaw contiene una vulnerabilidad en el componente de inicializaci\u00f3n del entorno sandbox, donde un atacante remoto podr\u00eda causar un control de acceso inadecuado al enviar contenido inyectado en el prompt que provoca que el agente lea y exfiltre variables de entorno del host no restringidas adecuadamente durante la creaci\u00f3n del sandbox. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a la revelaci\u00f3n de informaci\u00f3n."}], "lastModified": "2026-10-26T20:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:nemoclaw:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48E4DA43-5E4A-419B-BD40-D2DF1FB1F035", "versionEndExcluding": "0.0.18"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}