Is CVE-2026-16081 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-16081 being exploited in the wild.

How severe is CVE-2026-16081?

Medium severity, with a CVSS score of 4.3, published 18 July 2026.

Is there a fix for CVE-2026-16081?

A patch was published on 2026-07-18: Fix merged in commit 4b0229351678f479429b8d8b19207757266f246b Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-16081 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-16081?

Check whether you run Sipeed PicoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-16081: Sipeed PicoClaw CSRF in first-run password setup

CVE-2026-16081 · Severity: medium · CVSS 4.3 · Published 2026-07-18

Sipeed PicoClaw is an AI assistant and automation tool designed for efficient hardware deployment. A security flaw in its initial setup process allows a malicious website to remotely set the administrator password if the user has not yet configured it. This could allow an attacker to take control of the device's dashboard, modify configurations, and manage sensitive credentials.

Technologies: Sipeed PicoClaw. Vendors: Sipeed.

Quick answers

Is CVE-2026-16081 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-16081 being exploited in the wild.
How severe is CVE-2026-16081?: Medium severity, with a CVSS score of 4.3, published 18 July 2026.
Which products and versions are affected?: Sipeed PicoClaw <= 0.2.9.
Is there a fix for CVE-2026-16081?: A patch was published on 2026-07-18: Fix merged in commit 4b0229351678f479429b8d8b19207757266f246b Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-16081 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-16081?: Check whether you run Sipeed PicoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Cross-Site Request Forgery (CSRF) vulnerability exists in the `handleSetup` function within `web/backend/api/auth.go` of Sipeed PicoClaw up to version 0.2.9. The application exposes a public bootstrap endpoint at `POST /api/auth/setup` intended for initial configuration; however, it fails to validate browser provenance headers such as Origin, Referer, or Sec-Fetch-Site. A remote attacker can lure a victim with an uninitialized PicoClaw instance to a malicious webpage, which then silently submits a request to the local launcher to set an attacker-controlled administrator password. This grants the attacker full access to the launcher dashboard, including gateway control and credential management. A patch has been developed (commit 4b02293) to reject cross-site setup requests.

Affected products

Sipeed PicoClaw <= 0.2.9

Timeline

2026-07-18: disclosed: Vulnerability disclosed via GitHub Issue #3072
2026-07-18: advisory: NVD and VulDB publish advisory details
2026-07-18: patched: Fix merged in commit 4b0229351678f479429b8d8b19207757266f246b

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.