CYBERSECURITYTRACKER
Permanent story citation

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4996

As cited

Copy frozen at (site build).

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ai security

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security discovered a vulnerability in NVIDIA NemoClaw that permits an attacker-controlled webpage to gain unauthenticated control of a local Ollama instance and inject hidden instructions into the underlying model. The flaw was disclosed to NVIDIA's Product Security Incident team prior to public release.

Why it matters: Organizations deploying local LLMs via NemoClaw face the risk of model poisoning and arbitrary code execution through malicious web content, requiring immediate patching once available.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary