CVE-2026-16197

A vulnerability in Sipeed PicoClaw up to version 0.2.9 in the file web/backend/middleware/access_control.go allows authentication bypass by manipulating the allowed_cidrs argument. The attack is remote but requires high complexity and is difficult to exploit. The exploit is publicly available.

A weakness in the web_fetch component of Sipeed PicoClaw up to version 0.2.9 allows server-side request forgery (SSRF). The attack can be performed remotely, and the exploit is publicly available.

A security flaw was discovered in Sipeed PicoClaw up to version 0.2.9 in the dispatchIncoming function of the file pkg/channels/wecom/wecom.go in the Group Message Handler component. The issue involves incorrect authorization, allowing remote exploitation. The exploit has been publicly released and may be used in attacks.

A security vulnerability has been detected in Sipeed PicoClaw up to version 0.2.9, affecting the NewContextBuilder function in pkg/agent/context.go. The flaw allows inclusion of functionality from an untrusted control sphere, potentially leading to unauthorized actions. The attack requires local access, and the exploit has been publicly disclosed.

A server-side request forgery (SSRF) vulnerability has been identified in Sipeed PicoClaw up to version 0.2.9. The issue affects the web_fetch function in the file pkg/tools/integration/web.go. Remote exploitation is possible, and the exploit is publicly available.

A security flaw in Sipeed PicoClaw up to version 0.2.9 allows authentication bypass via capture-replay attack in the LINE Webhook component. The vulnerability affects the webhook.ParseRequest function in pkg/channels/line/line.go. Remote exploitation is possible, and a public exploit increases the risk.

Sipeed PicoClaw up to version 0.2.9 has a time-of-check time-of-use (TOCTOU) vulnerability in the ExecTool.executeRun function. A local attacker can exploit this to compromise data integrity.

A cross-site request forgery (CSRF) vulnerability was found in Sipeed PicoClaw up to version 0.2.9 in an unknown function of the file web/backend/api/auth.go. The attack can be launched remotely and the exploit has been publicly disclosed.

A vulnerability was found in Sipeed PicoClaw up to version 0.2.9, involving missing authorization in the rt.ReloadConfig function of the pkg/channels/pico/pico.go file. Manipulating the message.send argument allows remote exploitation. The exploit is publicly available.

A security vulnerability was found in Sipeed PicoClaw up to version 0.2.9 in the IPAllowlist function of the file web/backend/middleware/access_control.go in the Launcher component. This leads to improper access controls and can be exploited remotely. The exploit has been publicly disclosed and may be used in attacks.