A vulnerability was found in zevorn rt-claw up to 0.2.0. (CVE-2026-16201)
A vulnerability in zevorn rt-claw up to version 0.2.0 affects the http_request component's claw_net_get and claw_net_post functions, leading to information disclosure. The issue can be exploited remotely without authentication. The vulnerability has been publicly disclosed, and the project has not yet responded or issued a fix.
AI Analysis
Technical Summary
The vulnerability identified as CVE-2026-16201 exists in zevorn rt-claw versions up to 0.2.0 within the http_request component's claw_net_get and claw_net_post functions. It enables remote attackers to disclose information by manipulating these functions. The issue was responsibly reported early, but no vendor response or patch has been released. The exploit code is publicly available, increasing the risk of exploitation. The vulnerability is classified under CWE-200 (Information Exposure).
Potential Impact
Successful exploitation of this vulnerability results in information disclosure to remote attackers without requiring authentication or user interaction. This could lead to leakage of sensitive data handled by the affected functions. No evidence of privilege escalation, denial of service, or code execution is indicated.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is available and the vendor has not responded, users should monitor for updates from the project and consider restricting access to the affected functionality if possible until a fix is released.
A vulnerability was found in zevorn rt-claw up to 0.2.0. (CVE-2026-16201)
Description
A vulnerability in zevorn rt-claw up to version 0.2.0 affects the http_request component's claw_net_get and claw_net_post functions, leading to information disclosure. The issue can be exploited remotely without authentication. The vulnerability has been publicly disclosed, and the project has not yet responded or issued a fix.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability identified as CVE-2026-16201 exists in zevorn rt-claw versions up to 0.2.0 within the http_request component's claw_net_get and claw_net_post functions. It enables remote attackers to disclose information by manipulating these functions. The issue was responsibly reported early, but no vendor response or patch has been released. The exploit code is publicly available, increasing the risk of exploitation. The vulnerability is classified under CWE-200 (Information Exposure).
Potential Impact
Successful exploitation of this vulnerability results in information disclosure to remote attackers without requiring authentication or user interaction. This could lead to leakage of sensitive data handled by the affected functions. No evidence of privilege escalation, denial of service, or code execution is indicated.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is available and the vendor has not responded, users should monitor for updates from the project and consider restricting access to the affected functionality if possible until a fix is released.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-qc6r-fr26-j2gm
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-16201"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6a5d27b32a4a8d5989133771
Added to database: 07/19/2026, 19:38:27 UTC
Last enriched: 07/19/2026, 20:28:24 UTC
Last updated: 07/20/2026, 10:26:33 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.