NVIDIA NemoClaw Flaw Lets Attackers Hijack AI Agents Through DNS Rebinding

A critical vulnerability (CVE-2026-65105) in NVIDIA NemoClaw arises because NemoClaw starts Ollama bound to 0.0.0.0, exposing an unauthenticated HTTP API on port 11434; researchers show DNS rebinding can bypass browser-origin protections to let attacker-controlled webpages access the local model server, enumerate or modify models, and persistently poison model templates used by OpenClaw agents — organizations should restrict Ollama exposure, firewall the port, and monitor template changes.