Sipeed PicoClaw

• CVE-2026-16198 Medium 5.6 Sipeed PicoClaw First Run Setup access_control.go authentication bypass 0.6%
• CVE-2026-16197 Medium 6.3 Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorization 0.4%
• CVE-2026-16196 Medium 6.3 Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery 0.4%
• CVE-2026-16195 Medium 6.3 Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization 0.4%
• CVE-2026-16085 Medium 5.3 Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere 0.2%
• CVE-2026-16084 High 7.3 Sipeed PicoClaw web.go web_fetch server-side request forgery 0.6%
• CVE-2026-16083 Medium 5.3 Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay 0.7%
• CVE-2026-16082 Medium 5.3 Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou 0.1%
• CVE-2026-16081 Medium 4.3 Sipeed PicoClaw auth.go cross-site request forgery 0.2%
• CVE-2026-15320 Medium 5.4 Sipeed PicoClaw pico.go rt.ReloadConfig authorization 0.4%
• CVE-2026-15319 High 7.3 Sipeed PicoClaw Launcher access_control.go IPAllowlist access control 0.5%
• CVE-2026-15318 Medium 6.3 Sipeed PicoClaw MQTT Channel mqtt.go authorization 0.4%
• CVE-2026-15317 Medium 6.3 Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery 0.4%