Skip to content
OpenAdvisories

Vendor

poco-ai

4 known vulnerabilities.

Products

poco-claw 3 poco-agent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-16016

    poco-ai poco-claw task.py run_task server-side request forgery

    A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument callback_url leads to server-side request forgery. The attack is possible to be…

    poco-ai poco-claw