# CVE-2026-16200: zevorn rt-claw incorrect authorization in RPC Handler

Source: https://junglewise.ai/threats/cve-2026-16200-zevorn-rt-claw-incorrect-authorization-in-rpc-handler  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-19. Updated: 2026-07-19  
License: CC BY 4.0 with a link back

CVE-2026-16200 · Severity: high · CVSS 7.3 · Published 2026-07-19

zevorn rt-claw is an AI assistant framework. A security flaw in its communication system allows unauthorized remote users to bypass security restrictions and execute commands on the host system. This could lead to a complete takeover of the device running the software, potentially exposing sensitive data or allowing the device to be used in further attacks.

Technologies: [Zevorn Rt-Claw](https://junglewise.ai/threats/technologies/rt-claw). Vendors: [Zevorn](https://junglewise.ai/threats/vendors/zevorn).

## Quick answers

**Is CVE-2026-16200 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-16200 being exploited in the wild.

**How severe is CVE-2026-16200?** High severity, with a CVSS score of 7.3, published 19 July 2026.

**Which products and versions are affected?** Zevorn Rt-Claw up to 0.2.0.

**Is there a fix for CVE-2026-16200?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-16200 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-16200?** Check whether you run Zevorn Rt-Claw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An incorrect authorization vulnerability exists in the `claw_tool_invoke` function within `claw/services/swarm/swarm.c` of zevorn rt-claw. While the software includes a `CLAW_TOOL_LOCAL_ONLY` flag intended to prevent remote execution of sensitive tools, the RPC receiver path fails to validate this flag upon receiving inbound UDP requests. An unauthenticated remote attacker can send a crafted UDP swarm RPC request to the public listener (typically port 5300) to invoke the `run_script` tool. On Linux systems, this results in arbitrary Python code execution via `popen()`. As of the advisory date, no patch has been released by the vendor.

## Affected products

- zevorn rt-claw up to 0.2.0

## Timeline

- 2026-07-19: disclosed: Public disclosure of the vulnerability and exploit details.
- 2026-07-19: advisory: NVD and VulDB published the advisory.

## References

- [https://github.com/zevorn/rt-claw/](https://github.com/zevorn/rt-claw/)
- [https://github.com/zevorn/rt-claw/issues/133](https://github.com/zevorn/rt-claw/issues/133)
- [https://vuldb.com/cve/CVE-2026-16200](https://vuldb.com/cve/CVE-2026-16200)
- [https://vuldb.com/submit/857622](https://vuldb.com/submit/857622)
- [https://vuldb.com/vuln/380016](https://vuldb.com/vuln/380016)
- [https://vuldb.com/vuln/380016/cti](https://vuldb.com/vuln/380016/cti)

## Related threats

- [zevorn rt-claw code injection in Telegram-to-AI Tool Execution Flow](https://junglewise.ai/threats/cve-2026-16204-zevorn-rt-claw-code-injection-in-telegram-to-ai-tool-execution)
- [zevorn rt-claw information disclosure in http_request tool](https://junglewise.ai/threats/cve-2026-16201-zevorn-rt-claw-information-disclosure-in-http-request-tool)
- [zevorn rt-claw SSRF in swarm RPC service](https://junglewise.ai/threats/cve-2026-16128-zevorn-rt-claw-ssrf-in-swarm-rpc-service)
- [zevorn rt-claw SSRF in http_request tool](https://junglewise.ai/threats/cve-2026-16127-zevorn-rt-claw-ssrf-in-http-request-tool)
- [zevorn rt-claw incorrect authorization in Swarm RPC Receiver](https://junglewise.ai/threats/cve-2026-16126-zevorn-rt-claw-incorrect-authorization-in-swarm-rpc-receiver)