Is there a public PoC exploit available for CVE-2026-16201?

Yes, a public proof-of-concept exploit is available for CVE-2026-16201. Prioritise patching immediately. EPSS: 0.3%.

rt-claw CVE-2026-16201

Q: What is the CVSS score of CVE-2026-16201?

CVE-2026-16201 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-45412 MEDIUM

Information Exposure (CWE-200)

2026-07-19 VulDB

GHSA-qc6r-fr26-j2gm

Information Disclosure Rt Claw Zevorn

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Network-accessible, no privileges or interaction required; only low confidentiality impact with no integrity or availability consequence, unchanged scope.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Jul 19, 2026 - 01:22 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

Analysis Generated

Jul 19, 2026 - 01:13 vuln.today

CVE Published

Jul 19, 2026 - 00:45 cve.org

MEDIUM 6.9

DescriptionCVE.org

A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation results in information disclosure. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Information disclosure in zevorn's rt-claw (all versions up to 0.2.0) is reachable remotely through manipulation of the claw_net_get and claw_net_post HTTP request functions in claw/services/tools/net.c, exposing sensitive data to unauthenticated network attackers. Publicly available exploit code exists (via GitHub issue #136), raising the practical exploitation threshold significantly. No vendor patch has been released; the project maintainer has not responded to the responsible disclosure report, leaving all deployed instances unmitigated.

Technical ContextAI

The affected component is the HTTP client abstraction layer within rt-claw (CPE: cpe:2.3:a:zevorn:rt-claw:*:*:*:*:*:*:*:*), a small open-source project hosted on GitHub by the author zevorn. The vulnerability resides in claw/services/tools/net.c, specifically in the claw_net_get and claw_net_post functions that handle outbound or inbound HTTP requests. The root cause is classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), indicating that the application inadvertently exposes data through its HTTP request handling logic - likely via insufficient access controls, improper response sanitization, or overly verbose error output returned through the http_request interface. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms the issue is reachable over the network without authentication or special conditions, and the E:P modifier confirms active proof-of-concept code exists.

RemediationAI

No vendor-released patch has been identified at time of analysis. The project maintainer was notified via a responsible disclosure issue report but has not responded. Immediate remediation options include: removing or disabling rt-claw from any production or internet-facing environments entirely, as the low maturity and unresponsive maintainer suggest this software should not be operating in sensitive deployments. If removal is not immediately feasible, restrict network access to the rt-claw service using firewall rules or network segmentation to prevent unauthenticated remote access to the HTTP request endpoints (claw_net_get/claw_net_post). Additionally, monitor the GitHub repository at https://github.com/zevorn/rt-claw/ and VulDB entry https://vuldb.com/vuln/380017 for any maintainer response or community-provided patch. Given the absence of a patch roadmap, migration to an actively maintained alternative is the recommended long-term action.