CVE-2026-16126 is an authorization vulnerability in zevorn rt-claw versions up to 0.2.0 affecting the handle_rpc_request function within the claw/services/swarm/swarm.c file. This flaw allows remote attackers to bypass intended authorization checks, potentially enabling unauthorized actions via the Swarm RPC Receiver component. The vulnerability has been publicly disclosed, but the project has not issued a fix or official response. No known exploits in the wild have been reported.

The vulnerability causes incorrect authorization, which may allow remote attackers to perform unauthorized operations through the affected RPC component. This could lead to unauthorized access or control over affected functionality. The severity is assessed as medium, reflecting moderate risk due to the nature of the authorization bypass and remote attack vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been released and the vendor has not responded, users should monitor for updates from the project and consider implementing compensating controls to restrict access to the affected RPC interface until a fix is available.