Server-Side Request Forgery in Sipeed PicoClaw Web Integration

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. Patch name: c15aac21fe05ee103a470e1104bc891754e83392. To fix this issue, it is recommended to deploy a patch.

Casky was already ahead

This CVE exploits attack patterns that Casky's 331matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-16084 represents a critical server-side request forgery (SSRF) vulnerability in Sipeed PicoClaw versions up to 0.2.9, specifically within the web_fetch function of the web integration module. This vulnerability allows remote attackers to manipulate the application into making unauthorized requests to internal or external systems, potentially leading to data exfiltration, internal network reconnaissance, or lateral movement. Organizations deploying PicoClaw for web integration tasks are at immediate risk, particularly those exposing the application in network environments where internal services are accessible. The public availability of exploit code elevates the threat level, making rapid patching essential.

Casky's 331 matching security skills leverage Claude AI's extended reasoning to detect the attack patterns associated with TA0001 (Reconnaissance) and TA0006 (Resource Development) techniques that precede and enable SSRF exploitation. Practitioners using Casky would observe findings highlighting anomalous outbound HTTP requests originating from the web_fetch function to unexpected internal IP ranges (RFC 1918 addresses, 127.0.0.1, or cloud metadata endpoints), suspicious Host header manipulations, and requests to non-whitelisted domains. The platform's skill mapping would surface indicators such as attempts to access internal service discovery endpoints, probing of infrastructure ports (6379 Redis, 27017 MongoDB, 3306 MySQL), and reconnaissance of cloud provider metadata services—all characteristic of SSRF exploitation chains. Security teams would receive correlated alerts that help distinguish malicious SSRF attempts from legitimate application functionality.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

331 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-16084.

Abuse of Public-Facing API: Mobile API Abuse

mobile security · low

Run

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

MITRE ATT&CK Techniques

TA0001 TA0006

Investigate the attack patterns behind CVE-2026-16084

Casky has 331 skills that investigate the attack patterns behind CVE-2026-16084. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn