CVE-2026-15668

louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery

View on CVE.org
Published Jul 14, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Analysis

AI-generated

Technical impact

The vulnerability resides in Louisho5 Picobot up to version 0.2.0, within the WebTool.Execute function. An attacker can supply a crafted URL argument that is passed directly to an internal request‑making routine, enabling the tool to make arbitrary outbound HTTP requests. This server‑side request forgery can be exploited remotely to reach internal resources or exfiltrate data.

Affected Systems

The affected product is Louisho5 Picobot, any instance running version 0.2.0 or older. The issue is present in the web tool component of the internal agent tools. No vendor patch exists yet; the project has not responded to issue reports.

Risk and Exploitability

The CVSS score is 5.3, indicating a moderate severity. The EPSS score is < 1%, reflecting a low but nonzero exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The exploitation requires the victim to invoke the web service endpoint that calls WebTool.Execute with a malicious URL. It is not explicitly stated that additional compromise is needed, so this is inferred. Because the SSRF can target internal network services, the risk is significant if the attacker can reach privileged endpoints.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Louisho5 Picobot to a version that removes the SSRF flaw, if one is released.
  • If an update is unavailable, restrict the Picobot process’s outbound network access using firewall or network segmentation so that outbound requests cannot reach internal resources.
  • Configure the Picobot web API to validate or whitelist URLs supplied to WebTool.Execute, ensuring only allowed domains are reachable.
  • Optionally disable the web tool feature or remove the exposed API endpoint if it is not required.

Generated by OpenCVE AI on July 31, 2026 at 10:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery
First Time appeared Louisho5
Louisho5 picobot
Weaknesses CWE-918
CPEs cpe:2.3:a:louisho5:picobot:*:*:*:*:*:*:*:*
Vendors & Products Louisho5
Louisho5 picobot
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jul 15, 2026, 2:47 PM
Reserved
Jul 13, 2026, 9:12 PM

View source JSON

Updated
Jul 15, 2026, 2:46 PM

JSON

Status
Deferred
Published
Jul 14, 2026, 5:16 AM
Modified
Oct 24, 2026, 10:10 PM

View source JSON

No data.

Updated
Jul 31, 2026, 11:00 AM

JSON