CVE-2026-16125

Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1

Description A server-side request forgery (SSRF) issue exists in the http request component. Remote exploitation is possible through the manipulation of the url argument within the claw net get() and claw net post() functions located in the claw/services/tools/net.c file. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the claw net get() and claw net post() functions to minimize the risk of exploitation.