NVIDIA NemoClaw Vulnerability Lets Attackers Hijack AI Agents via DNS Rebinding

Gbhackers •Divya • August 26, 2026

A critical vulnerability in NVIDIA NemoClaw, tracked as CVE-2026-65105, could enable attackers to gain persistent control of locally deployed AI agents through a single visit to a malicious website. Researchers Elad Luz and Ofek Itach from Oasis Security discovered that NemoClaw’s local Ollama configuration exposes an unauthenticated API, making it susceptible to DNS rebinding attacks. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NVIDIA NemoClaw Vulnerability Allows AI Model Poisoning via Malicious Webpage A critical vulnerability (CVE-2026-65105) in NVIDIA's NemoClaw tool enables attackers to gain unauthenticated access to the local Ollama model server through a single visit to a malicious webpage. Discovered by Cyera's Oasis Security, the flaw stems from a network misconfiguration that exposes the Ollama API, allowing attackers to manipulate the AI agent's chat template and inject persistent malicious instructions. The exploit utilizes DNS rebinding to bypass security measures, leading to potential long-term corruption of AI agents. NVIDIA has released patches for MacOS and Linux, but a fix for Windows is still pending. The vulnerability highlights significant risks associated with AI agents and their deployment configurations. Attackers can exploit this flaw to alter how AI agents interpret messages, which can have severe implications for data integrity and security. 10 sources 73

Extracted Entities

NVIDIA NemoClaw Vulnerability Lets Attackers Hijack AI Agents via DNS Rebinding

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)