Sipeed vulnerabilities

Newest CVEs

• CVE-2026-16198

  Sipeed PicoClaw First Run Setup access_control.go authentication bypass

  Sipeed · PicoClaw

  Medium6.3
• CVE-2026-16197

  Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorization

  Sipeed · PicoClaw

  Medium5.3
• CVE-2026-16196

  Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery

  Sipeed · PicoClaw

  Medium5.3
• CVE-2026-16195

  Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization

  Sipeed · PicoClaw

  Medium5.3
• CVE-2026-16085

  Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere

  Sipeed · PicoClaw

  Medium4.8
• CVE-2026-16084

  Sipeed PicoClaw web.go web_fetch server-side request forgery

  Sipeed · PicoClaw

  Medium6.9
• CVE-2026-16083

  Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay

  Sipeed · PicoClaw

  Medium6.9
• CVE-2026-16082

  Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou

  Sipeed · PicoClaw

  Medium4.8
• CVE-2026-16081

  Sipeed PicoClaw auth.go cross-site request forgery

  Sipeed · PicoClaw

  Medium5.3
• CVE-2026-15320

  Sipeed PicoClaw pico.go rt.ReloadConfig authorization

  Sipeed · PicoClaw

  Medium5.3