CVE-2026-16195 | Sipeed PicoClaw up to 0.2.9 Group Message wecom.go dispatchIncoming authorization (Issue 3076)

July 18, 2026 Yanac

A vulnerability categorized as critical has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization.

This vulnerability is known as CVE-2026-16195. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The reported GitHub issue was closed automatically due to inactivity.VulDB Recent EntriesRead More