Multiple NVIDIA FLARE SDK and NemoClaw vulnerabilities

Affected Environment
NVIDIA FLARE SDK on Linux and macOS, and NVIDIA NemoClaw on all supported platforms are affected. All FLARE SDK versions before 2.7.2 and NemoClaw versions before 0.0.18 and 0.0.13 require review.

Threat Overview
FLARE SDK vulnerabilities allow code execution, privilege escalation, information disclosure, data tampering, and denial of service. NemoClaw vulnerabilities expose environment variables and enable SSRF, leading to information disclosure.

Exposure Timeline
Vulnerabilities and fixed versions were published by NVIDIA and summarised in this alert dated 30 April 2026. There are currently no reports of exploitation in the wild, and VPR scores are not yet available.

Attack Surface
Exposure exists where FLARE SDK is deployed with NVFlare Dashboard, FOBS, or components handling filesystem paths. NemoClaw deployments that process untrusted prompts or use external endpoint URLs expand the reachable attack surface.

Technical Root Cause
FLARE issues arise from authorization bypass, deserialization of untrusted data, and improper input validation in path handling. NemoClaw issues stem from improper access control in sandbox initialization and incomplete SSRF protection for certain IP ranges.

Exploitation Pathway
An attacker may exploit FLARE by abusing user-controlled keys, sending malicious FOBS messages, or performing path traversal. NemoClaw can be abused using prompt-injected content or crafted endpoint URLs in configuration files or CLI flags.