EUVD-2026-45408
GHSA-3c84-2qg9-24p8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable Feishu handler requires authenticated group membership (PR:L); no scope change; partial CIA impact consistent with authorization bypass in a messaging integration.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feishu_64.go of the component Group Message Handler. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically due to inactivity.
AnalysisAI
Missing authorization in PicoClaw's Feishu group message handler allows authenticated remote attackers to perform unauthorized actions by sending crafted group messages through the handleMessageReceive function in pkg/channels/feishu/feishu_64.go. All versions up to and including 0.2.9 are affected. A publicly available proof-of-concept exploit exists via GitHub issue #3082, but the issue was closed automatically due to inactivity - indicating no vendor-supplied fix has been released. No public exploit identified at time of analysis as actively exploited in the wild.
Technical ContextAI
Sipeed PicoClaw is a messaging integration bot/framework that bridges communication platforms, including Feishu (also known as Lark), a Chinese enterprise collaboration suite. The affected code resides in pkg/channels/feishu/feishu_64.go within the handleMessageReceive function, which processes inbound Feishu group messages. CWE-862 (Missing Authorization) indicates that the function does not verify whether the message sender has the necessary permissions before executing the requested action, effectively allowing any authenticated Feishu group member to trigger privileged operations within PicoClaw. The CPE string cpe:2.3:a:sipeed:picoclaw:*:*:*:*:*:*:*:* confirms all tracked versions up to 0.2.9 are in scope.
RemediationAI
No vendor-released patch identified at time of analysis - the GitHub issue #3082 reporting this vulnerability was closed automatically due to inactivity, and no patched version has been confirmed from the Sipeed repository at https://github.com/sipeed/picoclaw/. As a compensating control, operators should disable the Feishu channel integration entirely if it is not operationally required, as this eliminates the attack surface for this specific vulnerability. If Feishu integration must remain active, restrict the Feishu group membership to only trusted, explicitly authorized users to reduce the pool of potential exploiters. Additionally, review PicoClaw's group message handler configuration to identify whether application-level access controls can be layered on top of the missing authorization logic. Monitor Feishu group message logs for anomalous or unexpected command patterns as a detection measure.
Authentication bypass via capture-replay in Sipeed PicoClaw's LINE Webhook handler permits remote unauthenticated attack
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows unauthenticated remote attackers to make the s
Improper access control in Sipeed PicoClaw up to version 0.2.9 allows remote unauthenticated attackers to bypass the IP
Server-side request forgery in Sipeed PicoClaw through version 0.2.9 allows low-privileged remote attackers to cause the
Incorrect authorization in Sipeed PicoClaw's WeCom Group Message Handler allows authenticated remote attackers to bypass
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows remote attackers to manipulate the WebFetchToo
Missing authorization in Sipeed PicoClaw up to version 0.2.9 permits remote low-privileged attackers to invoke the rt.Re
Incorrect authorization in Sipeed PicoClaw's MQTT Channel Handler (pkg/channels/mqtt/mqtt.go) through version 0.2.9 allo
Cross-site request forgery in Sipeed PicoClaw through version 0.2.9 allows a remote attacker to forge the initial admin
Inclusion of functionality from an untrusted control sphere (CWE-829) in Sipeed PicoClaw through version 0.2.9 allows a
Time-of-check time-of-use race condition in Sipeed PicoClaw up to version 0.2.9 allows locally authenticated low-privile
Remote command injection in PicoClaw Web Launcher Management Plane (versions up to 0.2.4) allows unauthenticated attacke
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today