Threat Intelligence Database

A server-side request forgery (SSRF) vulnerability exists in zevorn rt-claw up to version 0.2.0. The issue affects the functions claw_net_get and claw_net_post in the http_request component, specifically in the file claw/tools/tool_net.c. Manipulation of the URL argument can lead to SSRF attacks that can be performed remotely. The vulnerability was reported early to the project, but no response or fix has been provided yet. Exploit code is publicly available, though no known exploits in the wild have been confirmed.

A vulnerability exists in zevorn rt-claw up to version 0.2.0 in the handle_rpc_request function of the Swarm RPC Receiver component. This flaw causes incorrect authorization, allowing remote attackers to exploit it. The vulnerability has been publicly disclosed, but no patch or vendor response has been provided yet. The issue relates to improper access control (CWE-285).

A server-side request forgery (SSRF) vulnerability exists in the zevorn rt-claw project up to version 0.2.0. The issue is in the functions claw_net_get and claw_net_post within the http_request component, where manipulation of the URL argument can lead to SSRF. This vulnerability can be exploited remotely. Although the vulnerability was reported early, the project has not yet responded or issued a fix. Public exploit code is available, but no known widespread exploitation has been reported.

A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receiver_thread of the file claw/services/swarm/swarm.c of the component http_request. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-16127 is a server-side request forgery (SSRF) vulnerability in the zevorn rt-claw software up to version 0.2.0. The issue exists in the claw_net_get and claw_net_post functions within the http_request component, where manipulation of the URL argument can lead to SSRF. The vulnerability can be exploited remotely. The project has been informed but has not yet responded or provided a fix. The CVSS score is 6.9, indicating a medium severity level.

CVE-2026-16126 is a medium severity vulnerability in zevorn rt-claw versions 0.1 and 0.2.0. It involves incorrect authorization in the handle_rpc_request function of the Swarm RPC Receiver component. The flaw allows remote attackers to exploit authorization logic errors. The vulnerability has been publicly disclosed, but no official fix or vendor response is available yet.

A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.