PatchSiren cyber security CVE debrief
CVE-2026-36045 Sipeed CVE debrief
CVE-2026-36045 describes an OS command injection vulnerability in picoclaw versions v0.1.2 and earlier. The vulnerability exists in the ExecTool component (pkg/tools/shell.go), specifically within the guardCommand() function. This function attempts to restrict shell command execution using a denylist of 8 regular expressions, but the denylist is incomplete and can be bypassed. The CVE was published on 2026-05-27. The affected product is picoclaw, a project associated with Sipeed based on the release reference. The vulnerability allows attackers to inject arbitrary OS commands due to the insufficient denylist-based input validation.
- Vendor
- Sipeed
- Product
- picoclaw
- CVSS
- Unknown
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-05-27
- Original CVE updated
- 2026-05-27
- Advisory published
- 2026-05-27
- Advisory updated
- 2026-05-27
Who should care
Organizations using picoclaw for shell command execution, particularly in automated or exposed environments, should prioritize patching. Security teams should assess any deployments of picoclaw v0.1.2 or earlier for potential command injection exposure.
Technical summary
The guardCommand() function in picoclaw's ExecTool component (pkg/tools/shell.go) uses an incomplete denylist of 8 regular expressions to filter shell commands. Attackers can bypass these restrictions to execute arbitrary OS commands. The vulnerability affects picoclaw v0.1.2 and earlier versions.
Defensive priority
high
Recommended defensive actions
- Upgrade picoclaw to a version newer than v0.1.2 when available
- Review and replace denylist-based input validation with allowlist-based validation in shell command execution functions
- Audit all uses of ExecTool component for command injection risks
- Implement defense-in-depth with additional input sanitization and parameterized command execution where possible
- Monitor for security advisories from the picoclaw project for patch availability
Evidence notes
The CVE description confirms the vulnerability location in pkg/tools/shell.go within the guardCommand() function. The incomplete denylist of 8 regular expressions is explicitly cited as the root cause. Release tag v0.1.2 is referenced as the affected version boundary.
Official resources
2026-05-27