CVE-2026-15319
Sipeed PicoClaw Launcher access_control.go IPAllowlist access control
CVSS Score
7.3
EPSS Score
0.3%
EPSS Percentile
24th
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the component Launcher. Such manipulation leads to improper access controls. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The name of the patch is 3126. A patch should be applied to remediate this issue.
| CWE | CWE-284 CWE-266 |
| Vendor | sipeed |
| Product | picoclaw |
| Published | Jul 10, 2026 |
| Last Updated | Jul 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for sipeed picoclaw
Be the first to know when new high vulnerabilities affecting sipeed picoclaw are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Sipeed / PicoClaw
0.2.0 0.2.1 0.2.2 0.2.3 0.2.4 0.2.5 0.2.6 0.2.7 0.2.8 0.2.9
References
vuldb.com: https://vuldb.com/vuln/377259 vuldb.com: https://vuldb.com/vuln/377259/cti vuldb.com: https://vuldb.com/cve/CVE-2026-15319 vuldb.com: https://vuldb.com/submit/852884 github.com: https://github.com/sipeed/picoclaw/issues/3069 github.com: https://github.com/sipeed/picoclaw/pull/3126 github.com: https://github.com/sipeed/picoclaw/
Credits
🔍 Eric-d (VulDB User)