# CVE-2026-15320: Sipeed PicoClaw missing authorization in configuration reload

Source: https://junglewise.ai/threats/cve-2026-15320-sipeed-picoclaw-missing-authorization-in-configuration-reload  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-15320 · Severity: medium · CVSS 5.4 · Published 2026-07-10

Sipeed PicoClaw is an AI assistant framework designed for low-power hardware. A security flaw allows regular chat users to trigger a full reload of the system's configuration by sending a specific command through the chat interface. While administrative changes usually require a secure management token, this bypass allows non-administrative users to force the system to restart its services, potentially causing temporary service interruptions or operational instability.

Technologies: [Sipeed PicoClaw](https://junglewise.ai/threats/technologies/picoclaw). Vendors: [Sipeed](https://junglewise.ai/threats/vendors/sipeed).

## Quick answers

**Is CVE-2026-15320 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-15320 being exploited in the wild.

**How severe is CVE-2026-15320?** Medium severity, with a CVSS score of 5.4, published 10 July 2026.

**Which products and versions are affected?** Sipeed PicoClaw up to 0.2.9.

**Is there a fix for CVE-2026-15320?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-15320 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-15320?** Check whether you run Sipeed PicoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A missing authorization check in the PicoClaw command execution pipeline allows users authenticated to the Pico WebSocket channel to invoke administrative actions. Specifically, the `rt.ReloadConfig` function in `pkg/channels/pico/pico.go` can be triggered by sending a `/reload` command within a standard `message.send` payload. While the dedicated HTTP management endpoint `/reload` correctly enforces bearer-token authorization, the chat-based command path fails to verify if the sender has administrative privileges. An attacker with a valid Pico chat token can remotely force a configuration reload, leading to a service restart and potential availability issues. The vulnerability is present in versions up to 0.2.9.

## Affected products

- Sipeed PicoClaw up to 0.2.9

## Timeline

- 2026-07-10: advisory: NVD publication date
- 2026-07-10: disclosed: Public exploit availability reported

## References

- [https://github.com/sipeed/picoclaw/](https://github.com/sipeed/picoclaw/)
- [https://github.com/sipeed/picoclaw/issues/3071](https://github.com/sipeed/picoclaw/issues/3071)
- [https://vuldb.com/cve/CVE-2026-15320](https://vuldb.com/cve/CVE-2026-15320)
- [https://vuldb.com/submit/852942](https://vuldb.com/submit/852942)
- [https://vuldb.com/vuln/377260](https://vuldb.com/vuln/377260)
- [https://vuldb.com/vuln/377260/cti](https://vuldb.com/vuln/377260/cti)

## Related threats

- [Sipeed PicoClaw authentication bypass in First Run Setup](https://junglewise.ai/threats/cve-2026-16198-sipeed-picoclaw-authentication-bypass-in-first-run-setup)
- [Sipeed PicoClaw missing authorization in Feishu Group Message Handler](https://junglewise.ai/threats/cve-2026-16197-sipeed-picoclaw-missing-authorization-in-feishu-group-message)
- [Sipeed PicoClaw SSRF in web_fetch via special-use IPv4 bypass](https://junglewise.ai/threats/cve-2026-16196-sipeed-picoclaw-ssrf-in-web-fetch-via-special-use-ipv4-bypass)
- [Sipeed PicoClaw incorrect authorization in WeCom Group Message Handler](https://junglewise.ai/threats/cve-2026-16195-sipeed-picoclaw-incorrect-authorization-in-wecom-group-message)
- [Sipeed PicoClaw untrusted functionality inclusion in NewContextBuilder](https://junglewise.ai/threats/cve-2026-16085-sipeed-picoclaw-untrusted-functionality-inclusion-in)