MDR
Solutions
Partners
About
Resources
Other
May 5, 2026
FLARE SDK vulnerabilities allow code execution, privilege escalation, information disclosure, data tampering, and denial of service. NemoClaw vulnerabilities expose environment variables and enable SSRF, leading to information disclosure.
Apply vendor patch
NVIDIA FLARE SDK on Linux and macOS, and NVIDIA NemoClaw on all supported platforms are affected. All FLARE SDK versions before 2.7.2 and NemoClaw versions before 0.0.18 and 0.0.13 require review.
If exploited, FLARE issues may allow attackers to run arbitrary code, escalate privileges, tamper data, or disrupt services.
NemoClaw exploitation may expose sensitive environment variables or internal resources accessed via forged requests.
FLARE issues arise from authorization bypass, deserialization of untrusted data, and improper input validation in path handling. NemoClaw issues stem from improper access control in sandbox initialization and incomplete SSRF protection for certain IP ranges.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore Managed Detection and ResponseAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
.jpg)