CVE-2026-16196 - Vulnerability Details

- Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery

Description

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405. To fix this issue, it is recommended to deploy a patch.

Published: 2026-07-18

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A flaw in the isPrivateOrRestrictedIP function within the web_fetch component of Sipeed PicoClaw allows an attacker to cause the server to make HTTP requests to arbitrary addresses, including internal services. This server‑side request forgery (SSRF) can expose internal resources, enable credential harvesting, or facilitate lateral movement within the network. The flaw exists in versions up to 0.2.9 and is mitigated by applying the public patch provided by the vendor.

Affected Systems

Sipeed PicoClaw versions 0.2.9 and earlier are affected. The vulnerability resides in the file pkg/tools/integration/web.go of the web_fetch component. Version 0.2.9 or earlier should be considered vulnerable; newer releases are presumed patched.

Risk and Exploitability

The CVSS score of 5.3 indicates medium severity, and the EPSS score of less than 1% suggests a low but non‑zero likelihood of exploitation. The vulnerability is not listed in CISA KEV, but an exploit is publicly available. Attackers can initiate it remotely, making the risk moderate for deployments with unrestricted outbound network access.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Sipeed

PicoClaw

affected

Version	Status	Constraints
`0.2.0`	affected	—
`0.2.1`	affected	—
`0.2.2`	affected	—
`0.2.3`	affected	—
`0.2.4`	affected	—
`0.2.5`	affected	—
`0.2.6`	affected	—
`0.2.7`	affected	—
`0.2.8`	affected	—
`0.2.9`	affected	—

No data.

Vendor Product Confidence Versions

Sipeed

Picoclaw

95%

Version	Status	Scheme	Platform
`0.2.0`	affected	semver	—
`0.2.1`	affected	semver	—
`0.2.2`	affected	semver	—
`0.2.3`	affected	semver	—
`0.2.4`	affected	semver	—
`0.2.5`	affected	semver	—
`0.2.6`	affected	semver	—
`0.2.7`	affected	semver	—
`0.2.8`	affected	semver	—
`0.2.9`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply the patch referenced by commit 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405 to the PicoClaw codebase.
If a patch is unavailable, upgrade to the latest PicoClaw release that incorporates the fix.
Configure the web_fetch service or underlying infrastructure to block or whitelist outbound requests to private IP ranges to prevent SSRF attempts.

Generated by OpenCVE AI on July 30, 2026 at 22:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00289.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/sipeed/picoclaw/
https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405
https://github.com/sipeed/picoclaw/issues/3077
https://github.com/sipeed/picoclaw/pull/3085
https://vuldb.com/cve/CVE-2026-16196
https://vuldb.com/submit/852963
https://vuldb.com/vuln/380012
https://vuldb.com/vuln/380012/cti

History

Wed, 22 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sat, 18 Jul 2026 23:15:00 +0000

Type	Values Removed	Values Added
Description		A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405. To fix this issue, it is recommended to deploy a patch.
Title		Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery
First Time appeared		Sipeed Sipeed picoclaw
Weaknesses		CWE-918
CPEs		cpe:2.3:a:sipeed:picoclaw::::::::
Vendors & Products		Sipeed Sipeed picoclaw
References		https://github.com/sipeed/picoclaw/ https://github.com/sipeed/picoclaw/commit/2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405 https://github.com/sipeed/picoclaw/issues/3077 https://github.com/sipeed/picoclaw/pull/3085 https://vuldb.com/cve/CVE-2026-16196 https://vuldb.com/submit/852963 https://vuldb.com/vuln/380012 https://vuldb.com/vuln/380012/cti
Metrics		cvssV2_0 `{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}` cvssV3_0 `{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}` cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Sipeed Picoclaw

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-07-18T22:45:13.066Z

Updated: 2026-07-22T15:01:58.974Z

Reserved: 2026-07-18T07:22:33.012Z

Link: CVE-2026-16196

Vulnrichment

Updated: 2026-07-22T15:01:28.950Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-07-30T23:00:22Z

Weaknesses

CWE-918
Server-Side Request Forgery (SSRF)

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object