CVE-2026-16127

Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1

Description An issue exists in the http request component within the file claw/tools/tool net.c. Remote manipulation of the url variable passed to the claw net get() and claw net post() functions allows for server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the claw net get() and claw net post() functions.