Forensic Summary
Oasis Security has disclosed a vulnerability in NVIDIA's NemoClaw agent stack that exposes local Ollama inference servers to unauthenticated access when the daemon is bound to 0.0.0.0:11434, enabling attackers to modify a model's chat template and inject persistent hidden instructions. The attack chain combines a misconfigured network binding, bypassed CORS and Host header middleware, and DNS rebinding to allow a malicious webpage to silently poison the AI model used by every subsequent conversation. A partial fix is available for macOS and Linux in v0.0.35, but Windows and WSL deployments remain unpatched and receive only a warning banner.
Read the full technical deep-dive on Grid the Grey: https://gridthegrey.com/posts/nvidia-nemoclaw-flaw-lets-malicious-page-poison-local-ai-model/
Top comments (0)