CVE-2026-24222 - Vulnerability Analysis

Overview

NVIDIA NeMoClaw contains an information disclosure vulnerability caused by prompt injection in sandbox environment initialization, letting remote attackers exfiltrate host environment variables, exploit requires remote access.

Severity & Score

Impact

Remote attackers can exfiltrate sensitive host environment variables, leading to information disclosure.

Mitigation

Update to the latest version.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-24222
• https://nvidia.custhelp.com/app/answers/detail/a_id/5837
• https://www.cve.org/CVERecord?id=CVE-2026-24222

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner