<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sipeed-picoclaw</title><description>Every new CVE for sipeed-picoclaw.</description><link>https://agentprime.io/</link><item><title>CVE-2026-16198: Sipeed PicoClaw First Run Setup access_control.go authentication bypass</title><link>https://agentprime.io/advisories/CVE-2026-16198/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16198/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 23:30:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16197: Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorization</title><link>https://agentprime.io/advisories/CVE-2026-16197/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16197/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 23:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16196: Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-16196/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16196/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 22:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16195: Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization</title><link>https://agentprime.io/advisories/CVE-2026-16195/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16195/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 22:30:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16085: Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere</title><link>https://agentprime.io/advisories/CVE-2026-16085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16085/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 09:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16084: Sipeed PicoClaw web.go web_fetch server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-16084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16084/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 09:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16083: Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay</title><link>https://agentprime.io/advisories/CVE-2026-16083/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16083/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 08:30:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16082: Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou</title><link>https://agentprime.io/advisories/CVE-2026-16082/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16082/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 08:15:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16081: Sipeed PicoClaw auth.go cross-site request forgery</title><link>https://agentprime.io/advisories/CVE-2026-16081/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16081/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 07:45:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15320: Sipeed PicoClaw pico.go rt.ReloadConfig authorization</title><link>https://agentprime.io/advisories/CVE-2026-15320/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15320/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 02:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15319: Sipeed PicoClaw Launcher access_control.go IPAllowlist access control</title><link>https://agentprime.io/advisories/CVE-2026-15319/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15319/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 01:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15318: Sipeed PicoClaw MQTT Channel mqtt.go authorization</title><link>https://agentprime.io/advisories/CVE-2026-15318/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15318/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 01:30:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15317: Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-15317/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15317/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 00:00:13 GMT</pubDate><category>CVE</category></item></channel></rss>