This vulnerability affects the handle_rpc_request function in the claw/services/swarm/swarm.c file of the zevorn rt-claw project up to version 0.2.0. It causes incorrect authorization, enabling remote attackers to potentially perform unauthorized actions via the Swarm RPC Receiver component. The issue was reported early to the project but remains unaddressed. The CVSS 4.0 base score is 6.9 (medium), reflecting network attack vector, low complexity, no privileges or user interaction required, and low to low integrity and availability impacts. No official remediation or patch is currently available.

The vulnerability allows remote attackers to bypass authorization controls in the affected component, potentially leading to unauthorized access or actions within the system. The impact is rated medium severity with limited integrity and availability impact as per the CVSS 4.0 vector. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded with a fix, users should monitor for updates from the vendor. Until a patch is available, consider restricting network access to the affected service or implementing additional access controls to limit exposure.