CVE-2026-16085

MEDIUM

Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere

Title source: cna
STIX 2.1

Description

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.

References (6)

Core 6
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-379797 | Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere
https://vuldb.com/vuln/379797
Signature, Permissions Required signature permissions-required
VDB-379797 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/379797/cti
Third Party Advisory third-party-advisory
CVE-2026-16085 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-16085
Third Party Advisory third-party-advisory
Submit #852947 | Sipeed PicoClaw <= 0.2.9 Inclusion of Functionality from Untrusted Control Sphere (CWE-829)
https://vuldb.com/submit/852947
Exploit exploit issue-tracking
https://github.com/sipeed/picoclaw/issues/3075

Scores

CVSS v3 5.3
EPSS 0.0011
EPSS Percentile 1.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-829
Status published
Products (10)
Sipeed/PicoClaw 0.2.0
Sipeed/PicoClaw 0.2.1
Sipeed/PicoClaw 0.2.2
Sipeed/PicoClaw 0.2.3
Sipeed/PicoClaw 0.2.4
Sipeed/PicoClaw 0.2.5
Sipeed/PicoClaw 0.2.6
Sipeed/PicoClaw 0.2.7
Sipeed/PicoClaw 0.2.8
Sipeed/PicoClaw 0.2.9
Published Jul 18, 2026
Tracked Since Jul 18, 2026