Local Vulnerability in Sipeed PicoClaw Product by Sipeed
CVE-2026-16085

4.8MEDIUM

Key Information:

Vendor: Sipeed
Status: Picoclaw
Vendor: CVE Published:; 18 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-16085?

A security vulnerability exists in Sipeed PicoClaw versions up to 0.2.9 related to the NewContextBuilder function located in pkg/agent/context.go. This flaw allows attackers to manipulate the system by including functionality from an untrusted control sphere, potentially leading to unauthorized access or control. The exploit can be executed locally, raising significant concerns for users of the affected product. Although the issue has been publicly disclosed, the GitHub issue tracking this vulnerability was closed with the label 'not planned,' indicating a lack of forthcoming fixes or patches.

Affected Version(s)

PicoClaw 0.2.0

PicoClaw 0.2.1

PicoClaw 0.2.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-16085 - Proof of Concept