CVE-2026-16200 | A vulnerability has been found in zevorn rt-claw up to 0.2.0… | CVSS 7.3 HIGH

Description

A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file claw/services/swarm/swarm.c of the component RPC Handler. The manipulation leads to incorrect authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Metadata

CVE ID: CVE-2026-16200
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-07-18 07:29 UTC
Published: 2026-07-19 00:15 UTC
Last updated: 2026-07-19 00:15 UTC
Primary CWE: CWE-863
Incorrect Authorization
Vendor / Product: zevorn / rt-claw
Sources: cve.org · NVD

Severity & Metrics

7.3 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Affected products (1)

Vendor	Product	Platform	Versions
zevorn	rt-claw	—	0.1, 0.2.0

Weakness (CWE)

CWE	Source	Description
CWE-285	cna	Improper Authorization
CWE-863	cna	Incorrect Authorization

CVSS scores (4)

Score	Severity	Version	Source	Vector
7.5	N/D	2.0	cna	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
7.3	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
7.3	HIGH	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
6.9	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

References (6)

VDB-380016 | zevorn rt-claw RPC swarm.c claw_tool_invoke authorization https://vuldb.com/vuln/380016
VDB-380016 | CTI Indicators (IOB, IOC, IOA) https://vuldb.com/vuln/380016/cti
CVE-2026-16200 | CVE Analysis and Report https://vuldb.com/cve/CVE-2026-16200
Submit #857622 | zevorn rt-claw 36d128f72afa0b9d40a21bcd6069b0c193a58f82 (unreleased main, post-v0.2.0) Incorrect Authorization leading to Remote Code Execution (CWE-863) https://vuldb.com/submit/857622
https://github.com/zevorn/rt-claw/issues/133
https://github.com/zevorn/rt-claw/