PicoClaw versions up to 0.2.4 contain a command injection vulnerability in the Web Launcher Management Plane component, specifically in the /api/gateway/restart endpoint. This flaw allows remote attackers to execute arbitrary commands by manipulating input to this API. The vulnerability was reported early to the project but has not yet been addressed or patched.