NVIDIA NemoClaw for Linux Installation Script Lacks Integrity Check (CVE-2026-65097)

Vulnerability Overview CVE Number: CVE-2026-65097 Description: NVIDIA NemoClaw for Linux contains a vulnerability in its installation script that allows attackers to download code without integrity checks. Successful exploitation of this vulnerability may lead to code execution, privilege escalation, information disclosure, and data tampering. Affected Scope Affected Product: NVIDIA NemoClaw for Linux CVSS Score: - NIST Assessment: Not provided - CNA Assessment: 1.3 (Low) - Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Remediation Reference Links: - GitHub Link - NVD Link - CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD Last Modified Date: August 25, 2026 Source: NVIDIA Corporation Additional Information CVSS Version: 3.0 CVSS Version: 3.1 CVSS Version: 2.0 Reference Links GitHub Link NVD Link CVE.org Link Weakness Enumeration CWE-ID: CWE-404 CWE Name: Downloading Code Without Integrity Checks Source: NVIDIA Corporation Change Log Change Log: 1 change record (details not displayed) Quick Info CVE Dictionary Entry: CVE-2026-65097 NVD Publication Date: August 25, 2026 NVD

Goal Reached Thanks to every supporter — we hit 100%!

NVIDIA NemoClaw for Linux Installation Script Lacks Integrity Check (CVE-2026-65097)

More from this source