EUVD-2026-45406
GHSA-gv2q-43xx-w4gw
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable flaw requiring low-privilege WeCom membership; no scope change; limited partial impact across all three impact categories consistent with authorization bypass.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.
AnalysisAI
Incorrect authorization in Sipeed PicoClaw's WeCom Group Message Handler allows authenticated remote attackers to bypass access controls and perform unauthorized actions on affected deployments running version 0.2.9 and earlier. The flaw resides in the dispatchIncoming function within pkg/channels/wecom/wecom.go, where incoming group messages are processed without properly verifying the caller's authorization level. A publicly available proof-of-concept exploit exists, though no CISA KEV listing indicates exploitation remains opportunistic rather than widespread at time of analysis.
Technical ContextAI
Sipeed PicoClaw is a messaging bot or integration framework that bridges WeCom (WeChat Work, Tencent's enterprise messaging platform) with other services. The vulnerable component, the Group Message Handler in pkg/channels/wecom/wecom.go, implements the dispatchIncoming function responsible for routing and processing inbound group messages from the WeCom channel. CWE-863 (Incorrect Authorization) indicates that the application performs some authentication step but fails to enforce access control rules correctly - the system recognizes the user but does not properly restrict what actions or resources they are permitted to access during group message dispatch. This is distinct from authentication bypass (CWE-287); the user may be legitimately authenticated but the authorization decision is flawed or absent for certain operations. The affected CPE is cpe:2.3:a:sipeed:picoclaw:*:*:*:*:*:*:*:*.
RemediationAI
No vendor-released patch has been identified at time of analysis - the GitHub issue (https://github.com/sipeed/picoclaw/issues/3076) that serves as the primary exploit reference was closed automatically due to inactivity, suggesting the maintainer has not formally addressed the flaw. Organizations should first assess whether WeCom integration is actively needed; disabling the WeCom channel entirely by removing or commenting out its configuration eliminates the attack surface with no functional trade-off if WeCom is unused. If WeCom integration must remain active, restrict network access to the PicoClaw instance to trusted internal networks only, preventing externally authenticated users from reaching the dispatchIncoming endpoint. Implement application-layer access controls or a reverse proxy with authentication enforcement upstream of PicoClaw to supplement the missing authorization logic. Monitor the upstream repository at https://github.com/sipeed/picoclaw/ for any patched release and apply immediately when available. Given the absence of vendor response, consider forking and patching the authorization logic in pkg/channels/wecom/wecom.go directly if operational necessity requires continued use.
Authentication bypass via capture-replay in Sipeed PicoClaw's LINE Webhook handler permits remote unauthenticated attack
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows unauthenticated remote attackers to make the s
Improper access control in Sipeed PicoClaw up to version 0.2.9 allows remote unauthenticated attackers to bypass the IP
Server-side request forgery in Sipeed PicoClaw through version 0.2.9 allows low-privileged remote attackers to cause the
Missing authorization in PicoClaw's Feishu group message handler allows authenticated remote attackers to perform unauth
Server-side request forgery in Sipeed PicoClaw up to version 0.2.9 allows remote attackers to manipulate the WebFetchToo
Missing authorization in Sipeed PicoClaw up to version 0.2.9 permits remote low-privileged attackers to invoke the rt.Re
Incorrect authorization in Sipeed PicoClaw's MQTT Channel Handler (pkg/channels/mqtt/mqtt.go) through version 0.2.9 allo
Cross-site request forgery in Sipeed PicoClaw through version 0.2.9 allows a remote attacker to forge the initial admin
Inclusion of functionality from an untrusted control sphere (CWE-829) in Sipeed PicoClaw through version 0.2.9 allows a
Time-of-check time-of-use race condition in Sipeed PicoClaw up to version 0.2.9 allows locally authenticated low-privile
Remote command injection in PicoClaw Web Launcher Management Plane (versions up to 0.2.4) allows unauthenticated attacke
Same weakness CWE-863 – Incorrect Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today