PicoClaw vulnerabilities

2 known vulnerabilities in PicoClaw from Sipeed. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  PicoClaw: Server-Side Request Forgery

  CVE-2026-16084Jul 18, 2026Sipeed

  A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has be

• 7.3 High severity

  PicoClaw: Incorrect Privilege Assignment

  CVE-2026-15319Jul 10, 2026Sipeed

  A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack may