CVE-2026-24222

Katalog CVE

CVSS 8.6 · High EPSS 0,40%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada nvidia nemoclaw. Skor CVSS 3.1 8.6 (High) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandbox creation. A successful exploit of this vulnerability might lead to information disclosure.

Rincian

Terbit di NVD

28 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.6 (High), sumber nvidia.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 31,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5837 advisory vendor
• https://nvd.nist.gov/vuln/detail/CVE-2026-24222 pemerintah AS
• https://www.cve.org/CVERecord?id=CVE-2026-24222 advisory pihak ketiga