Back Feeds.4Sysops

NVIDIA NemoClaw flaw could poison local AI agents from a single malicious webpage

Feeds.4Sysops •IT News • August 25, 2026

A single visit to a malicious webpage could let attackers take over the local Ollama server used by NVIDIA NemoClaw and permanently alter how an AI agent interprets every future conversation. A safeguard added in NemoClaw v0.0.106 now blocks the vulnerable configuration when Ollama is exposed beyond the local machine, but administrators should still verify deployments and update older installations. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NVIDIA NemoClaw Vulnerability Allows AI Model Poisoning via Malicious Webpage A critical vulnerability (CVE-2026-65105) in NVIDIA's NemoClaw tool enables attackers to gain unauthenticated access to the local Ollama model server through a single visit to a malicious webpage. Discovered by Cyera's Oasis Security, the flaw stems from a network misconfiguration that exposes the Ollama API, allowing attackers to manipulate the AI agent's chat template and inject persistent malicious instructions. The exploit utilizes DNS rebinding to bypass security measures, leading to potential long-term corruption of AI agents. NVIDIA has released patches for MacOS and Linux, but a fix for Windows is still pending. The vulnerability highlights significant risks associated with AI agents and their deployment configurations. Attackers can exploit this flaw to alter how AI agents interpret messages, which can have severe implications for data integrity and security. 7 sources 73

NVIDIA NemoClaw flaw could poison local AI agents from a single malicious webpage

The full story

Extracted Entities

Platforms (1)

Tools (1)