{
 "id": "AIR-2026-1298",
 "slug": "cve-2026-65096-nvidia-nemoclaw-telegram-bridge-os-command-in",
 "title": "CVE-2026-65096: NVIDIA NemoClaw Telegram bridge OS command injection",
 "summary": "NVIDIA NemoClaw for Linux contains an OS command injection vulnerability within its Telegram bridge component. An attacker could exploit this to execute arbitrary commands, escalate privileges, and tamper with data.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "NVIDIA NemoClaw"
 ],
 "incident_date": "2026-08-25",
 "incident_date_precision": "day",
 "first_reported": "2026-08-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65096",
   "publisher": "NVD",
   "title": "CVE-2026-65096: NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command…",
   "published_at": "2026-08-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-65096",
  "nvidia",
  "command-injection"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}