EUVD-2026-42776
GHSA-9c82-3f2r-v942
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable with low complexity; PR:L required per CVSS 4.0 input; no confidentiality impact; scope unchanged with low integrity and availability impact only.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. The reported GitHub issue was closed automatically due to inactivity.
AnalysisAI
Missing authorization in Sipeed PicoClaw up to version 0.2.9 permits remote low-privileged attackers to invoke the rt.ReloadConfig function in pkg/channels/pico/pico.go by manipulating the message.send argument without proper authorization checks. The integrity and availability of the affected system are both at limited risk, as the CVSS 4.0 vector confirms no confidentiality exposure but allows unauthorized configuration reload or disruption. A public exploit exists (E:P), though the GitHub issue tracking the report was closed automatically due to inactivity, indicating no vendor remediation has been issued.
Technical ContextAI
Sipeed PicoClaw is a Go-based channel/messaging component developed by Sipeed, identified by CPE cpe:2.3:a:sipeed:picoclaw:*:*:*:*:*:*:*:* affecting all versions through 0.2.9. The vulnerable code path resides in pkg/channels/pico/pico.go within the rt.ReloadConfig function, which processes the message.send argument. The root cause is CWE-862 (Missing Authorization): the function does not enforce an authorization check before allowing a caller to trigger a configuration reload, meaning any authenticated user - regardless of privilege level - can manipulate this argument to exercise functionality intended only for privileged operators. This is a classic authorization enforcement gap in a message-handling pipeline, where input is accepted and acted upon before access control decisions are applied.
RemediationAI
No vendor-released patch has been identified at the time of analysis. The GitHub issue associated with this vulnerability (https://github.com/sipeed/picoclaw/issues/3071) was closed automatically due to inactivity, indicating the Sipeed maintainers have not issued a fix as of the reporting date. Organizations running Sipeed PicoClaw up to 0.2.9 should consider the following compensating controls: restrict network access to the PicoClaw service to only trusted, authorized clients via firewall rules or network segmentation, reducing exposure of the vulnerable endpoint; enforce the principle of least privilege by auditing which accounts hold any level of access to the service and removing unnecessary low-privilege accounts that could trigger rt.ReloadConfig; and monitor for anomalous configuration-reload events in application logs as an indicator of unauthorized invocation. Downstream consumers may also consider forking and patching the missing authorization check directly in pkg/channels/pico/pico.go ahead of an official release. Track https://vuldb.com/cve/CVE-2026-15320 and the GitHub repository for any upstream remediation activity.
Authentication bypass via capture-replay in Sipeed PicoClaw's LINE Webhook handler permits remote unauthenticated attack
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows unauthenticated remote attackers to make the s
Improper access control in Sipeed PicoClaw up to version 0.2.9 allows remote unauthenticated attackers to bypass the IP
Server-side request forgery in Sipeed PicoClaw through version 0.2.9 allows low-privileged remote attackers to cause the
Missing authorization in PicoClaw's Feishu group message handler allows authenticated remote attackers to perform unauth
Incorrect authorization in Sipeed PicoClaw's WeCom Group Message Handler allows authenticated remote attackers to bypass
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows remote attackers to manipulate the WebFetchToo
Incorrect authorization in Sipeed PicoClaw's MQTT Channel Handler (pkg/channels/mqtt/mqtt.go) through version 0.2.9 allo
Cross-site request forgery in Sipeed PicoClaw through version 0.2.9 allows a remote attacker to forge the initial admin
Inclusion of functionality from an untrusted control sphere (CWE-829) in Sipeed PicoClaw through version 0.2.9 allows a
Time-of-check time-of-use race condition in Sipeed PicoClaw up to version 0.2.9 allows locally authenticated low-privile
Remote command injection in PicoClaw Web Launcher Management Plane (versions up to 0.2.4) allows unauthenticated attacke
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today