A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

A vulnerability in NVIDIA NemoClaw allows an attacker to poison an AI model by serving a malicious webpage that can inject hidden instructions into every conversation. The vulnerability stems from a misconfigured Ollama backend that exposes the API to all network interfaces, bypassing authentication and allowing an att…