← Glossary Term
NemoClaw
Nvidia's tool for running an AI coding agent locally, which shipped with a serious security flaw in August 2026.
NemoClaw is Nvidia software that sets up an AI coding agent on your own machine, wiring a local model server such as Ollama to an agent that can read and write code. The appeal is that nothing leaves your computer.
It became news for the wrong reason. To make its Docker container reach the model, NemoClaw started Ollama listening on every network interface instead of only the local machine, which let a malicious webpage take control of the model server through a DNS rebinding attack. The flaw, CVE-2026-65105, was fixed for macOS and Linux in v0.0.35; the Windows and WSL path was still unpatched at disclosure.
Mentioned in