medium5.3
CVE-2026-16082
A vulnerability was identified in Sipeed PicoClaw up to 0.2.9.
Impact
A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation of the argument cwe leads to time-of-check time-of-use. The attack must be carried out locally. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.
Affected products
| Product | Affected versions |
|---|---|
| Sipeed PicoClaw | before 0.2.9. |
Versions were read from the advisory text. No structured product data has been published for this record yet.