NVIDIA NemoClaw Flaw Allows Poisoning of Local Ollama Models via Webpage
evilsocket · x · 2026-08-26
Oasis Security disclosed a weakness in NVIDIA NemoClaw that allows an attacker-controlled webpage to take control of a local Ollama instance and plant hidden instructions in the model. The issue is fixed in NemoClaw v0.0.35 for macOS and Linux, but a full fix is pending for Windows/WSL paths.
More from Infra
- Next-gen GraalVM benchmarks: 4x faster startup, 2x less memory, no build step needed — RealGeneKim · 2026-10-15
- How Microsoft optimized Windows for Nvidia's Arm-based RTX Spark AI laptops — tomwarren · 2026-10-15
- How Microsoft optimized Windows for Nvidia's Arm-based RTX Spark laptops — The Verge AI · 2026-10-15
- Global smartphone shipments plunge 22% in worst quarterly decline on record as AI demand fuels memory costs — Polymarket · 2026-10-15
- SK Hynix drops 11% again, now below 3x FY2027 earnings as AI memory selloff deepens — JOBhakdi · 2026-10-15
- ASML Sells Zero Lithography Machines into Europe as US Hosts 75%+ of AI Compute — NinaDSchick · 2026-10-15