Beveiligingsadvies

CVE-2026-16016

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-17 13:30:10

Laatst bijgewerkt 2026-07-17 14:51:53

Toegewezen door VulDB

CVSS-score 7.5

Status PUBLISHED

Beschrijving

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument callback_url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically due to inactivity.

← Alle CVE's bekijken Bekijk op cve.org ↗