CVE-2026-6987
published 2026-04-25CVE-2026-6987: A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management…
PriorityP267critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
3.13%
86.3th percentile
A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | sipeed_picoclaw | 0 – 0.2.4 | — |
| sipeed | picoclaw | <= 0.2.4 | — |
| sipeed | picoclaw | — | — |
| sipeed | picoclaw | — | — |
| sipeed | picoclaw | — | — |
| sipeed | picoclaw | — | — |
| sipeed | picoclaw | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv4.05.5MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6r3x-h84w-fhxx: A vulnerability was detected in PicoClaw up to 0
ghsa_unreviewed·2026-04-25
CVE-2026-6987 [MEDIUM] CWE-74 GHSA-6r3x-h84w-fhxx: A vulnerability was detected in PicoClaw up to 0
A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
GHSA
PicoClaw has an Injection issue in its Web Launcher Management Plane component
ghsa·2026-04-25
CVE-2026-6987 [MEDIUM] CWE-74 PicoClaw has an Injection issue in its Web Launcher Management Plane component
PicoClaw has an Injection issue in its Web Launcher Management Plane component
A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
VulDB
PicoClaw up to 0.2.4 Web Launcher Management Plane /api/gateway/restart command injection (Issue 2307)
vuldb·2026-04-24·CVSS 6.9
CVE-2026-6987 [MEDIUM] PicoClaw up to 0.2.4 Web Launcher Management Plane /api/gateway/restart command injection (Issue 2307)
A vulnerability identified as critical has been detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection.
This vulnerability is cataloged as CVE-2026-6987. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
The project was informed of the problem early through an issue report but has not responded yet.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-25
Published