Wednesday, August 26, 2026 · 2 of 5
CVE-2026-65105: NVIDIA NemoClaw binds Ollama to 0.0.0.0 with no auth, so one malicious webpage can rewrite your local model's chat template via DNS rebinding — persistently, invisibly, beneath every guardrail
— patched on macOS/Linux, Windows/WSL still unfixed (Aug 25)