EUVD-2026-42775
GHSA-f9rq-5867-x4mq
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible IP allowlist bypass with no privileges or interaction required; impact limited to low C/I/A with no scope change.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The name of the patch is 3126. A patch should be applied to remediate this issue.
AnalysisAI
Improper access control in Sipeed PicoClaw up to version 0.2.9 allows remote unauthenticated attackers to bypass the IP allowlist enforced by the Launcher's web backend middleware. The flaw resides in the IPAllowlist function within web/backend/middleware/access_control.go, which fails to correctly enforce source-address restrictions, permitting unauthorized network access to protected endpoints. A public proof-of-concept exploit exists (GitHub issue #3069), and an upstream patch (PR #3126) has been submitted but a formally released patched version has not been independently confirmed.
Technical ContextAI
PicoClaw is a web-enabled launcher product by Sipeed (CPE: cpe:2.3:a:sipeed:picoclaw:*:*:*:*:*:*:*:*), implemented in Go. The affected component is the access control middleware in web/backend/middleware/access_control.go, specifically the IPAllowlist function, which is responsible for restricting inbound HTTP requests to a configured set of allowed source IP addresses. CWE-284 (Improper Access Control) indicates the allowlist enforcement logic can be circumvented - likely through header manipulation (e.g., X-Forwarded-For spoofing), malformed IP representations, or a logic error in the comparison routine - rather than a memory-safety issue. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms exploitation requires no special network position, no elevated privileges, and no target interaction.
RemediationAI
Apply the upstream fix from GitHub pull request #3126 (https://github.com/sipeed/picoclaw/pull/3126) once it is merged and a tagged release is published; a formally released patched version number has not been independently confirmed at time of analysis. Until an official patch is available, the primary compensating control is to restrict network access to the PicoClaw web interface at the infrastructure level - place the service behind a firewall or reverse proxy that enforces IP allowlisting independently of the application layer, removing reliance on the flawed IPAllowlist middleware. Disabling the web interface entirely eliminates the attack surface if the Launcher UI is not operationally required. Monitoring HTTP access logs for unexpected source IPs reaching normally restricted endpoints can serve as a detection mechanism. Operators should track the pull request at https://vuldb.com/vuln/377259 for patch release confirmation.
Authentication bypass via capture-replay in Sipeed PicoClaw's LINE Webhook handler permits remote unauthenticated attack
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows unauthenticated remote attackers to make the s
Server-side request forgery in Sipeed PicoClaw through version 0.2.9 allows low-privileged remote attackers to cause the
Missing authorization in PicoClaw's Feishu group message handler allows authenticated remote attackers to perform unauth
Incorrect authorization in Sipeed PicoClaw's WeCom Group Message Handler allows authenticated remote attackers to bypass
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows remote attackers to manipulate the WebFetchToo
Missing authorization in Sipeed PicoClaw up to version 0.2.9 permits remote low-privileged attackers to invoke the rt.Re
Incorrect authorization in Sipeed PicoClaw's MQTT Channel Handler (pkg/channels/mqtt/mqtt.go) through version 0.2.9 allo
Cross-site request forgery in Sipeed PicoClaw through version 0.2.9 allows a remote attacker to forge the initial admin
Inclusion of functionality from an untrusted control sphere (CWE-829) in Sipeed PicoClaw through version 0.2.9 allows a
Time-of-check time-of-use race condition in Sipeed PicoClaw up to version 0.2.9 allows locally authenticated low-privile
Remote command injection in PicoClaw Web Launcher Management Plane (versions up to 0.2.4) allows unauthenticated attacke
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today