Poco-ai vulnerabilities
We track 1 vulnerability in Poco-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Poco-ai vulnerabilities
- 7.3 High severity
poco-claw: Server-Side Request Forgery
A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument callback_url leads to server-side request forgery. The attack is possible to be