Security Advisory

CVE-2026-16082

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-18 08:15:07

Last updated 2026-07-22 15:49:47

Assigner VulDB

CVSS score 4.8

State PUBLISHED

Description

A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation of the argument cwe leads to time-of-check time-of-use. The attack must be carried out locally. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.

← Browse all CVEs View on cve.org ↗