This vulnerability affects the handle_rpc_request function in the claw/services/swarm/swarm.c file of the zevorn rt-claw project up to version 0.2.0. The issue is an incorrect authorization flaw that can be triggered remotely, potentially allowing unauthorized access or actions via the Swarm RPC Receiver component. The vulnerability was reported early to the project, but no remediation or patch has been released. Public exploit details exist, though no known exploitation in the wild has been confirmed.

The incorrect authorization vulnerability could allow remote attackers to bypass intended access controls in the Swarm RPC Receiver, potentially leading to unauthorized operations or data access. The CVSS 4.0 base score of 6.9 reflects a medium severity with network attack vector, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's advisories for updates. Until a patch is released, consider restricting network access to the affected component or implementing additional access controls to mitigate unauthorized remote requests.