The flaw originates from unsanitized input handling in the /api/gateway/restart endpoint within the PicoClaw Web Launcher Management Plane. An attacker that can send requests to this endpoint can inject arbitrary shell commands, leading to remote command execution. The issue belongs to CWE‑74 and CWE‑77, indicating flawed command construction and lack of validation. Remote access to the management interface is sufficient to trigger the injection.

Firmware versions up to and including 0.2.4 of the PicoClaw device are affected. Any device running the affected firmware that exposes the management API to external networks is at risk. The product is maintained by the PicoClaw project, which has documented the issue but has not yet released a fixed build.

The CVSS score of 6.9 denotes moderate severity, while an EPSS score of < 1 % points to a low current exploitation likelihood. The vulnerability is not listed in CISA’s KEV catalog. Attackers would require network reachability to the device’s web management API and would exploit the injection by supplying crafted input to the restart endpoint. While the chance of active exploitation remains low at present, the impact of successful injection—full system compromise—remains high, especially for devices exposed to the internet.