EUVD-2026-45386
GHSA-qrh7-f8q9-mrxf
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
SSRF crosses system boundaries (S:C); AV:N/PR:N confirmed by CVSS 4.0 vector; no direct availability impact on the vulnerable component itself.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Server-side request forgery in rt-claw up to 0.2.0 allows unauthenticated remote attackers to manipulate the url argument in the claw_net_get and claw_net_post HTTP request functions, coercing the server into issuing arbitrary outbound requests to internal or external resources. A proof-of-concept exploit has been publicly disclosed via GitHub issue #134. No vendor patch exists - the project maintainer was notified through responsible disclosure but has not responded, leaving deployments with no official fix path.
Technical ContextAI
rt-claw (CPE: cpe:2.3:a:zevorn:rt-claw:*:*:*:*:*:*:*:*) is an open-source project authored by zevorn. The vulnerable code resides in claw/services/tools/net.c, specifically in the claw_net_get and claw_net_post functions that compose and dispatch HTTP requests. CWE-918 (Server-Side Request Forgery) describes the root cause: user-controlled input - in this case the url argument - is passed directly into an HTTP client call without adequate scheme, host, or path validation. This allows attackers to redirect server-initiated requests toward internal network endpoints (e.g., cloud metadata services, administrative APIs, localhost services) or external attacker-controlled hosts, bypassing perimeter controls that only filter inbound traffic.
RemediationAI
No vendor-released patch has been identified at time of analysis - the project maintainer was notified via GitHub issue #134 (https://github.com/zevorn/rt-claw/issues/134) but has not responded. As a compensating control, implement strict URL allowlisting at the application layer or via a WAF/reverse proxy to block outbound requests from rt-claw to internal RFC 1918 address ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), localhost (127.0.0.0/8), and cloud metadata endpoints (169.254.169.254). Restrict the host running rt-claw from initiating outbound connections beyond explicitly required destinations using host-based firewall rules or egress filtering - note this may break legitimate HTTP request functionality. If rt-claw is not essential to production operations, consider disabling or replacing the service until an official fix is released. Monitor VulDB entry https://vuldb.com/cve/CVE-2026-16125 for patch availability.
Information disclosure in zevorn's rt-claw (all versions up to 0.2.0) is reachable remotely through manipulation of the
Incorrect authorization in zevorn rt-claw up to version 0.2.0 allows remote unauthenticated attackers to bypass access c
Incorrect authorization in zevorn rt-claw up to version 0.2.0 permits remote unauthenticated attackers to invoke privile
Server-side request forgery in zevorn rt-claw up to version 0.2.0 allows remote unauthenticated attackers to forge arbit
Server-side request forgery in zevorn rt-claw up to version 0.2.0 allows unauthenticated remote attackers to manipulate
Code injection in zevorn rt-claw up to version 0.2.0 allows remote attackers to execute arbitrary code via the Telegram-
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today