CVE-2026-16085

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.

CVSS 4.0

1.9CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

5.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-25)

CWE

CWE-829

Published

2026-07-18

Modified

2026-10-24

Record from

the NVD, synced 2026-10-25

References

• https://github.com/sipeed/picoclaw/
• https://github.com/sipeed/picoclaw/issues/3075
• https://vuldb.com/cve/CVE-2026-16085
• https://vuldb.com/submit/852947
• https://vuldb.com/vuln/379797

Check your stackJSON