CVE-2026-16125
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A server-side request forgery (SSRF) vulnerability was found in the rt-claw library up to version 0.2.0 in the claw_net_get and claw_net_post functions. The issue is in the file claw/services/tools/net.c, where the url argument can be manipulated by an attacker. The exploit has been made public, and the project has not responded to the report.
Risk Assessment
An attacker can exploit this vulnerability to make requests from the server to internal network resources, potentially leading to disclosure of sensitive data or further compromise of the infrastructure.
Recommendation
Immediately update the rt-claw library to the latest version if available, or apply temporary mitigations such as URL validation and filtering in the network functions.
Other vulnerabilities in rt-claw
See all- CVE-2026-16200High
A vulnerability was found in zevorn rt-claw up to version 0.2.0 in the claw_tool_invoke function of the RPC handler. Incorrect authorization allows remote exploitation without proper privileges. The exploit is public and the project has not responded to the issue report.
- CVE-2026-16127High
A vulnerability was found in zevorn rt-claw up to version 0.2.0 in the functions claw_net_get and claw_net_post in the file claw/tools/tool_net.c. Manipulation of the url argument leads to server-side request forgery (SSRF). The attack can be performed remotely and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.