CVE-2026-16015
poco-ai poco-claw executor_manager API tasks.py create_task missing authentication
Description
A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of the file executor_manager/app/api/v1/tasks.py of the component executor_manager API. Executing a manipulation can lead to missing authentication. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.5.7 is able to resolve this issue. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. It is recommended to upgrade the affected component.
INFO
Published Date :
July 17, 2026, 1:15 p.m.
Last Modified :
July 17, 2026, 1:15 p.m.
Remotely Exploit :
No
Source :
VulDB
Solution
- Upgrade executor manager API to version 0.5.7.
- Apply the patch 67fcc88505c57f77d3fcf04eb5b89425b10cbf48.
- Verify the component is updated and secured.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-16015 vulnerability anywhere in the article.