Aug 25 2026

Oasis Security discloses a DNS-rebinding flaw in Nvidia's NemoClaw agent stack that let any webpage a user visited hijack the local Ollama server and plant hidden instructions in the model's chat template.

SAFETY

Original reporting

BThe Hacker News

NemoClaw bound Ollama to every network interface without authentication; a single page visit was enough to rewrite the model's system template with persistent, undetectable instructions. Fixed in NemoClaw v0.0.35 for macOS and Linux; no assigned; no exploitation reported.

Named in this event

NvidiaOasis Security

Open calls that touch this

Nvidia beats the $91B consensus on August 26th · 75%, resolves August 31st 2026
Nvidia's compute-financing MOUs produce $100B of closed vehicles in a year · 65%, resolves August 11th 2027
Nvidia's Perplexity investment closes this year · 60%, resolves December 31st 2026

Issues that mention Nvidia, Oasis Security

Around the same time

Aug 25 2026POLICYCHIPS

Taiwan indicts nine people, including Nvidia and Supermicro employees, for smuggling B300 servers to China: 130 servers falsely documented, 74 delivered, 56 seized at the border.

Aug 25 2026SAFETYOPEN

Taiwanese researchers TeamT5 report Chinese state-affiliated hacking groups more than doubled attack frequency after adopting DeepSeek, favoring it for its capability and near-absent safety guardrails.

BInsurance Journal

Aug 24 2026PEOPLE

Meta hires Luke Metz from OpenAI for Superintelligence Labs, the second researcher out of Barret Zoph's post-training group this year, reporting to Alexandr Wang.

Aug 24 2026POLICYSAFETY

Alabama subpoenas OpenAI over the Hugging Face breach, after fifteen state attorneys general demand it preserve records and stop internal cybersecurity evaluations.

Aug 24 2026MONEYCHIPS

Amazon raises Echo, Kindle and Fire TV prices as much as 60%, blaming memory and storage costs driven by AI demand: the first broad consumer-hardware repricing of the memory crunch.