Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-16016: poco-claw can be tricked into sending unwanted requests

CVE-2026-16016 · published 3 months ago

Summary

The poco-claw software (versions up to 0.5.4) lets an attacker control the callback URL used by its run_task function, causing the server to make network calls to addresses of the attacker’s choosing. This could let the server access internal systems or expose data. Update to a patched version or disable the vulnerable function until a fix is applied.

Original advisory text

poco-ai poco-claw task.py run_task server-side request forgery

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument callback_url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically due to inactivity.

References

https://vuldb.com/cve/CVE-2026-16016 Vendor Advisory
https://vuldb.com/submit/856814 Vendor Advisory
https://vuldb.com/vuln/379758 Vendor Advisory
https://github.com/poco-ai/poco-claw/issues/138 Third Party Advisory
https://vuldb.com/vuln/379758/cti Third Party Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16016... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-16016 Vendor Advisory
https://github.com/poco-ai/poco-claw/ Exploit

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

8.4 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-918Server-Side Request Forgery (SSRF)

Timeline

Published17 Jul 2026

Updated4 Nov 2026

First seen17 Jul 2026

Sources

CVE-2026-16016 · NVD

CVE-2026-16016 · OSV

Track software like this

Free during beta