A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of a local Ollama instance serving an AI agent and plant hidden instructions inside the model. The findings were shared with The Hacker News ahead of publication, and reported to NVIDIA's Product Security Incident team.