Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-16085 Local Code Inclusion Vulnerability in Sipeed PicoClaw Up to 0.2.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16085
Post summary
The text simply references CVE-2026-16085 for a local code inclusion vulnerability in Sipeed PicoClaw up to 0.2.9, providing no further detail.