CVE-2026-16015

A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of the file executor_manager/app/api/v1/tasks.py of the component executor_manager API. Executing a manipulation can lead to missing authentication. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.5.7 is able to resolve this issue. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. It is recommended to upgrade the affected component.

• CWE-287
• CWE-306

• https://github.com/poco-ai/poco-claw/
• https://github.com/poco-ai/poco-claw/commit/67fcc88505c57f77d3fcf04eb5b89425b10cbf48
• https://github.com/poco-ai/poco-claw/issues/136
• https://github.com/poco-ai/poco-claw/issues/137
• https://github.com/poco-ai/poco-claw/pull/135
• https://github.com/poco-ai/poco-claw/releases/tag/0.5.7
• https://vuldb.com/cve/CVE-2026-16015
• https://vuldb.com/submit/856812
• https://vuldb.com/submit/856813
• https://vuldb.com/submit/856815
• https://vuldb.com/submit/856816
• https://vuldb.com/vuln/379757
• https://vuldb.com/vuln/379757/cti

Published

Jul 17, 2026

Last Modified

Jul 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-16002The affected product is vulnerable to an Out-of-bounds read,…8.8
• CVE-2026-16008A security vulnerability has been detected in sagold json-sc…6.3
• CVE-2026-16009A vulnerability was detected in itsourcecode Hospital Manage…6.3
• CVE-2026-1601A weakness has been identified in Totolink A7000R 4.1cu.4154…6.3
• CVE-2026-16013A vulnerability has been found in liftoff-sr CIPster up to 6…5.5
• CVE-2026-16014A vulnerability was found in code-projects Hospital Bed Mana…7.3
• CVE-2026-16016A vulnerability was identified in poco-ai poco-claw up to 0.…7.3
• CVE-2026-16017A security flaw has been discovered in mosaxiv clawlet up to…6.3
• CVE-2026-1602SQL injection in Ivanti Endpoint Manager before version 2024…6.5
• CVE-2026-1603An authentication bypass in Ivanti Endpoint Manager before v…7.5
• CVE-2026-1605In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5,…7.5
• CVE-2026-1606GitLab has remediated an issue in GitLab CE/EE affecting all…4.3