NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
Summary
NVIDIA and 36 other organizations formed the Open Secure AI Alliance to develop tools for securing AI agents (software programs that can take actions autonomously). The alliance released NOOA, a framework that makes AI agent behavior easier to test and audit by organizing code in a way developers are familiar with, but the framework itself cannot safely contain harmful code—it requires operating system-level isolation like containers or virtual machines as an additional security boundary.
Solution / Mitigation
NVIDIA's documentation states that agents executing generated code must run behind operating system-level isolation, such as a container, virtual machine, or its OpenShell sandbox. NOOA provides inspection and tracing, but the OS-level sandbox is described as the containment boundary.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://thehackernews.com/2026/07/nvidia-forms-37-member-open-secure-ai.html
First tracked: July 27, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 85%