Threats Tagged 'cve-2026-16125'

A server-side request forgery (SSRF) vulnerability exists in the zevorn rt-claw project up to version 0.2.0. The issue is in the functions claw_net_get and claw_net_post within the http_request component, where manipulation of the URL argument can lead to SSRF. This vulnerability can be exploited remotely. Although the vulnerability was reported early, the project has not yet responded or issued a fix. Public exploit code is available, but no known widespread exploitation has been reported.

A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.