Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-65082

CVE-2026-65082HIGH

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection.

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0022   11.6     —

AFFECTED
  Product   Versions       Fixed
  NemoClaw  0 to 0.0.17 –  —

TIMELINE
  Jul 21  Reserved by nvidia
  Aug 25  Published (CNA: nvidia)
  Sep 1   RESCORED — CVE-2026-65082 (NVIDIA NemoClaw). CVSS 7 → 7.8 (NVD).

CWE-94 · CNA: nvidia · CVSS v3.1 · 3 references · NVD status: Analyzed

Description

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
July 21, 2026	Reserved	Reserved by nvidia
August 25, 2026	Published	Published (CNA: nvidia)
September 1, 2026	RESCORED	RESCORED — CVE-2026-65082 (NVIDIA NemoClaw). CVSS 7 → 7.8 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
NVIDIA	NemoClaw	—	0 to 0.0.17	—

Weaknesses

CWE-94

References (3)

https://github.com/NVIDIA/product-security/tree/main/2026/5872 [Patch]
https://nvd.nist.gov/vuln/detail/CVE-2026-65082 [US Government Resource]
https://www.cve.org/CVERecord?id=CVE-2026-65082 [Third Party Advisory]

Authoritative record: CVE-2026-65082 at cve.org

Vendors: nvidia

Weaknesses: CWE-94

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-65082 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.