Critical NemoClaw CVE: Deployment Wrapper Exposes Local AI Agents to Hijacking and Persistent Poisoning

NemoClaw's deployment wrapper binds Ollama to 0.0.0.0, enabling DNS rebinding and LAN hijacking. Attackers can persistently poison model templates, surviving reboots and bypassing guardrails. This is a severe supply-chain and integrity risk for self-hosters using NemoClaw with Ollama. Immediate audit and mitigation required. New article confirms and deepens the threat: DNS rebinding + chat template poisoning is even more insidious—persistent and invisible. Windows/WSL remains unfixed, a critical gap for many self-hosters.