Beveiligingsadvies

CVE-2026-24231

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 17:46:57
Laatst bijgewerkt 2026-04-29 15:11:36
Toegewezen door nvidia
CVSS-score 6.3
Status PUBLISHED

Beschrijving

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.