# CVE-2026-15318: Sipeed PicoClaw authorization bypass in MQTT Channel Handler

Source: https://junglewise.ai/threats/cve-2026-15318-sipeed-picoclaw-authorization-bypass-in-mqtt-channel-handler  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-15318 · Severity: medium · CVSS 6.3 · Published 2026-07-10

Sipeed PicoClaw, an AI assistant framework, contains a security flaw in how it handles MQTT messages. The system incorrectly trusts a user-provided ID within the message topic to verify who sent the message, rather than using secure authentication from the message broker. This allows an attacker to bypass access controls and send unauthorized commands to the AI assistant by pretending to be a permitted user.

Technologies: [Sipeed PicoClaw](https://junglewise.ai/threats/technologies/picoclaw). Vendors: [Sipeed](https://junglewise.ai/threats/vendors/sipeed).

## Quick answers

**Is CVE-2026-15318 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-15318 being exploited in the wild.

**How severe is CVE-2026-15318?** Medium severity, with a CVSS score of 6.3, published 10 July 2026.

**Which products and versions are affected?** Sipeed PicoClaw up to 0.2.9.

**Is there a fix for CVE-2026-15318?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-15318 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-15318?** Check whether you run Sipeed PicoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper authorization vulnerability (CWE-285/CWE-863) exists in Sipeed PicoClaw up to version 0.2.9 within the MQTT channel implementation (`pkg/channels/mqtt/mqtt.go`). The application extracts the `client_id` directly from the MQTT request topic string (`/picoclaw/{agent_id}/{client_id}/request`) and uses it as the primary security principal for authorization checks. Because this value is client-controlled and not verified against broker-authenticated metadata, a remote attacker with the ability to publish to the MQTT broker can impersonate any allowlisted user. This allows unauthorized ingress to the inbound message bus. A public exploit is available, and the issue was identified in GitHub issue #3068.

## Affected products

- Sipeed PicoClaw up to 0.2.9

## Timeline

- 2026-07-10: advisory: NVD publication date
- 2026-07-10: disclosed: Public disclosure via GitHub and VulDB

## References

- [https://github.com/sipeed/picoclaw/](https://github.com/sipeed/picoclaw/)
- [https://github.com/sipeed/picoclaw/issues/3068](https://github.com/sipeed/picoclaw/issues/3068)
- [https://vuldb.com/cve/CVE-2026-15318](https://vuldb.com/cve/CVE-2026-15318)
- [https://vuldb.com/submit/852879](https://vuldb.com/submit/852879)
- [https://vuldb.com/vuln/377258](https://vuldb.com/vuln/377258)
- [https://vuldb.com/vuln/377258/cti](https://vuldb.com/vuln/377258/cti)

## Related threats

- [Sipeed PicoClaw authentication bypass in First Run Setup](https://junglewise.ai/threats/cve-2026-16198-sipeed-picoclaw-authentication-bypass-in-first-run-setup)
- [Sipeed PicoClaw missing authorization in Feishu Group Message Handler](https://junglewise.ai/threats/cve-2026-16197-sipeed-picoclaw-missing-authorization-in-feishu-group-message)
- [Sipeed PicoClaw SSRF in web_fetch via special-use IPv4 bypass](https://junglewise.ai/threats/cve-2026-16196-sipeed-picoclaw-ssrf-in-web-fetch-via-special-use-ipv4-bypass)
- [Sipeed PicoClaw incorrect authorization in WeCom Group Message Handler](https://junglewise.ai/threats/cve-2026-16195-sipeed-picoclaw-incorrect-authorization-in-wecom-group-message)
- [Sipeed PicoClaw untrusted functionality inclusion in NewContextBuilder](https://junglewise.ai/threats/cve-2026-16085-sipeed-picoclaw-untrusted-functionality-inclusion-in)