Sipeed Picoclaw vulnerabilities

• sipeed picoclaw Sipeed PicoClaw First Run Setup access_control.go authentication bypass CVE-2026-16198 6.3 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorization CVE-2026-16197 5.3 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery CVE-2026-16196 5.3 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization CVE-2026-16195 5.3 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere CVE-2026-16085 4.8 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw web.go web_fetch server-side request forgery CVE-2026-16084 6.9 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay CVE-2026-16083 6.9 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou CVE-2026-16082 4.8 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw auth.go cross-site request forgery CVE-2026-16081 5.3 MediumJuly 18, 2026
• sipeed picoclaw Sipeed PicoClaw pico.go rt.ReloadConfig authorization CVE-2026-15320 5.3 MediumJuly 10, 2026
• sipeed picoclaw Sipeed PicoClaw Launcher access_control.go IPAllowlist access control CVE-2026-15319 6.9 MediumJuly 10, 2026
• sipeed picoclaw Sipeed PicoClaw MQTT Channel mqtt.go authorization CVE-2026-15318 5.3 MediumJuly 10, 2026
• sipeed picoclaw Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery CVE-2026-15317 5.3 MediumJuly 10, 2026
• sipeed picoclaw PicoClaw Web Launcher Management Plane restart command injection CVE-2026-6987 6.9 MediumApril 25, 2026