A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

NemoClaw's configuration can expose the local Ollama inference API by binding it to 0.0.0.0 on some Windows/WSL paths, allowing an attacker-controlled webpage to use DNS rebinding and bypass Host/Origin checks to write poisoned chat templates that persist across conversations; macOS and Linux received fixes, Windows/WSL remain vulnerable, and no active exploitation was reported.