Authorization Vulnerability in Zevorn RT-Claw RPC Handler
CVE-2026-16200

6.9MEDIUM

Key Information:

Vendor: Zevorn
Status: Rt-claw
Vendor: CVE Published:; 19 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-16200?

A security flaw has been identified in Zevorn RT-Claw versions up to 0.2.0 that affects the RPC Handler's claw_tool_invoke function. This vulnerability allows for incorrect authorization, which could lead to unauthorized remote access. The issue has been publicly disclosed and poses potential risks as it enables malicious actors to exploit the weakness. Despite the community bringing attention to this matter through an issue report, there has been no response from the vendor.

Affected Version(s)

rt-claw 0.1

rt-claw 0.2.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-16200 - Proof of Concept