poco-claw vulnerabilities

1 known vulnerability in poco-claw from Poco-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  poco-claw: Server-Side Request Forgery

  CVE-2026-16016Jul 17, 2026Poco-ai

  A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument callback_url leads to server-side request forgery. The attack is possible to be