{
 "id": "AIR-2026-1299",
 "slug": "cve-2026-65089-os-command-injection-vulnerability-in-nvidia",
 "title": "CVE-2026-65089: OS command injection vulnerability in NVIDIA NemoClaw",
 "summary": "NVIDIA NemoClaw for Linux contains an OS command injection vulnerability in its status and logs plugin commands. Exploitation could lead to code execution, data tampering, information disclosure, and denial of service.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "NVIDIA NemoClaw"
 ],
 "incident_date": "2026-08-25",
 "incident_date_precision": "day",
 "first_reported": "2026-08-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65089",
   "publisher": "NVD",
   "title": "CVE-2026-65089: NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS…",
   "published_at": "2026-08-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-65089",
  "command-injection"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}