CVE-2026-16128

Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1

Description A security flaw in the http request component allows for remote server-side request forgery. This issue occurs within the receiver thread() function located in the claw/services/swarm/swarm.c file. Server-side request forgery is a technique where an attacker induces a server-side application to make requests to an unintended location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the receiver thread() function to minimize the risk of exploitation.