CVE-2026-16200General

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file claw/services/swarm/swarm.c of the component RPC Handler. The manipulation leads to incorrect authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

2.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-285CWE-863

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-19); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-19: 1Mentions · 2026-07-21: 1PoC Mentioned / Linked · 2026-07-21: 1Patch / Workaround · 2026-07-21: 1Technical Details · 2026-07-19: 1Technical Details · 2026-07-21: 107-1907-21
Signal classification2 categories
General
150.0%
PoC
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-07-191
General1
2026-07-211
PoC1
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    PoC

    🚨 HIGH severity CVE-2026-16200 (CVSS 7.3) affects zevorn rt-claw ≤0.2.0. Incorrect authorization flaw in RPC Handler allows remote exploitation. Public exploit available. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/RHzHpRe4xN

    Post summary

    The tweet announces CVE-2026-16200, noting a high severity and public exploit availability, and urges an immediate patch.

    0000038
    88 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-16200 Incorrect Authorization in Zevorn rt-claw RPC Handler Up to 0.2.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16200

    Post summary

    CVE-2026-16200 is a reported incorrect‑authorization flaw in the Zevorn rt‑claw RPC handler affecting versions up to 0.2.0, but no PoC, exploit, active use, or patch information is provided.

    00000106
    4.1K followersView on X

Explore more