Zurück zur CVE-Übersicht
CVE-2026-16082
MEDIUM(5.3)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Risk Signal Score23/100 — NIEDRIG
- CVSS 5.3 — Mittel
- Weniger als 24 Stunden alt
Beschreibung
A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation of the argument cwe leads to time-of-check time-of-use. The attack must be carried out locally. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.