NemoClaw’s AI can be poisoned through a browser tab

A vulnerability in Nvidia's NemoClaw allows attackers to poison a local AI model through a malicious website visit using DNS rebinding (a technique where an attacker tricks a browser into connecting to a local service by redirecting a domain name). Once the attacker gains access to the Ollama model server (the software that runs AI models locally), they can inject harmful instructions into the model's chat template (the layer controlling how messages are formatted), and these malicious instructions persist invisibly across all future conversations, making them extremely difficult to detect.