CVE-2026-16200

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-16200

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16200.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-16200

Published

2026-07-19T00:15:10Z

Modified

2026-08-12T03:51:29Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

zevorn rt-claw RPC swarm.c claw_tool_invoke authorization

Details

A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file claw/services/swarm/swarm.c of the component RPC Handler. The manipulation leads to incorrect authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-285",
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16200.json"
}

References

Affected packages

Git / github.com/gevico/rt-claw

Affected ranges

Type

GIT

Repo

https://github.com/gevico/rt-claw

Events

Introduced

5b2684aac44aa6463b4b64a77a23d43fd7b0985e

Last Affected

fded6928506420459af12fbb2c99005e7f93f7bf

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.1"
        },
        {
            "last_affected": "0.1"
        },
        {
            "introduced": "0.2.0"
        },
        {
            "last_affected": "0.2.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*

0.1

0.2.0

v0.*

v0.1.0

v0.2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16200.json"