CVE-2026-16127
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability was found in zevorn rt-claw up to version 0.2.0 in the functions claw_net_get and claw_net_post in the file claw/tools/tool_net.c. Manipulation of the url argument leads to server-side request forgery (SSRF). The attack can be performed remotely and the exploit is publicly available.
Risk Assessment
The organization is at risk of unauthorized network requests from the server, potentially leading to access to internal resources, data leakage, or further system compromise.
Recommendation
Immediately update the rt-claw library to the latest available version or apply a workaround such as validating and sanitizing the url argument in the application code.
Other vulnerabilities in rt-claw
See all- CVE-2026-16200High
A vulnerability was found in zevorn rt-claw up to version 0.2.0 in the claw_tool_invoke function of the RPC handler. Incorrect authorization allows remote exploitation without proper privileges. The exploit is public and the project has not responded to the issue report.
- CVE-2026-16125High
A server-side request forgery (SSRF) vulnerability was found in the rt-claw library up to version 0.2.0 in the claw_net_get and claw_net_post functions. The issue is in the file claw/services/tools/net.c, where the url argument can be manipulated by an attacker. The exploit has been made public, and the project has not responded to the report.
Original NVD description (English source)
A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get/claw_net_post of the file claw/tools/tool_net.c of the component http_request. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.