Sipeed vulnerabilities
We track 3 vulnerabilities in Sipeed products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 18, 2026.
Latest Sipeed vulnerabilities
- 7.3 High severity
PicoClaw: Server-Side Request Forgery
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has be
- 7.3 High severity
PicoClaw: Incorrect Privilege Assignment
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack may
- 8.2 High severity
NanoKVM: Missing Authentication for Critical Functionality
Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to ex