A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker News ahead of publication, and the report says Oasis Security reported them to NVIDIA's Product Security Incident

Factually, Oasis Security reports that a weakness in NVIDIA NemoClaw allows a malicious webpage to gain unauthenticated control over a local Ollama instance that serves an AI agent, and to embed hidden instructions directly into the model. This would let attackers silently influence the agent’s behavior through poisoned model instructions rather than normal prompts. From a RealGround analysis perspective, this highlights the need to harden local agent hosting stacks against remote control, validate and monitor model integrity for tampering, and treat browser-to-agent integrations as a critical attack surface. Organizations should apply secure agent design, continuous red teaming, and AI supply chain review to detect and mitigate similar model-level instruction poisoning risks.