CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.

CVSS v3 6.3 MEDIUM

6.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://nvd.nist.gov/vuln/detail/CVE-2026-24231	US Government Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5837	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2026-24231	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:nemoclaw:*:*:*:*:*:*:*:*

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) NVIDIA NemoClaw contiene una vulnerabilidad en el componente de protección SSRF validateEndpointUrl(), donde un atacante podría causar una falsificación de petición del lado del servidor al proporcionar una URL de endpoint manipulada que referencia el rango de direcciones 0.0.0.0/8 a través de un archivo de configuración de blueprint o un indicador CLI. Un exploit exitoso de esta vulnerabilidad podría llevar a la revelación de información.

Information

Published : 2026-04-28 19:36

Updated : 2026-10-26 20:10

NVD link : CVE-2026-24231

Mitre link : CVE-2026-24231

CVE.ORG link : CVE-2026-24231

JSON object : View

Products Affected

nvidia

nemoclaw

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2026-24231", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24231", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-29T14:13:51.583176Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@nvidia.com", "affectedData": [{"vendor": "NVIDIA", "product": "NemoClaw", "versions": [{"status": "affected", "version": "All versions prior to v0.0.13"}], "platforms": ["All"], "defaultStatus": "unaffected"}]}], "published": "2026-04-28T19:36:45.637", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24231", "tags": ["US Government Resource"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5837", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-24231", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure."}, {"lang": "es", "value": "NVIDIA NemoClaw contiene una vulnerabilidad en el componente de protecci\u00f3n SSRF validateEndpointUrl(), donde un atacante podr\u00eda causar una falsificaci\u00f3n de petici\u00f3n del lado del servidor al proporcionar una URL de endpoint manipulada que referencia el rango de direcciones 0.0.0.0/8 a trav\u00e9s de un archivo de configuraci\u00f3n de blueprint o un indicador CLI. Un exploit exitoso de esta vulnerabilidad podr\u00eda llevar a la revelaci\u00f3n de informaci\u00f3n."}], "lastModified": "2026-10-26T20:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:nemoclaw:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "689A9A43-F5DE-4E18-BB74-1A9F15B00DE0", "versionEndExcluding": "0.0.13"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}