PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-36045 Sipeed CVE debrief

CVE-2026-36045 describes an OS command injection vulnerability in picoclaw versions v0.1.2 and earlier. The vulnerability exists in the ExecTool component (pkg/tools/shell.go), specifically within the guardCommand() function. This function attempts to restrict shell command execution using a denylist of 8 regular expressions, but the denylist is incomplete and can be bypassed. The CVE was published on 2026-05-27. The affected product is picoclaw, a project associated with Sipeed based on the release reference. The vulnerability allows attackers to inject arbitrary OS commands due to the insufficient denylist-based input validation.

Vendor
Sipeed
Product
picoclaw
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-27
Original CVE updated
2026-06-01
Advisory published
2026-05-27
Advisory updated
2026-06-01

Who should care

Organizations using picoclaw for shell command execution, particularly in automated or exposed environments, should prioritize patching. Security teams should assess any deployments of picoclaw v0.1.2 or earlier for potential command injection exposure.

Technical summary

The guardCommand() function in picoclaw's ExecTool component (pkg/tools/shell.go) uses an incomplete denylist of 8 regular expressions to filter shell commands. Attackers can bypass these restrictions to execute arbitrary OS commands. The vulnerability affects picoclaw v0.1.2 and earlier versions.

Defensive priority

high

Recommended defensive actions

  • Upgrade picoclaw to a version newer than v0.1.2 when available
  • Review and replace denylist-based input validation with allowlist-based validation in shell command execution functions
  • Audit all uses of ExecTool component for command injection risks
  • Implement defense-in-depth with additional input sanitization and parameterized command execution where possible
  • Monitor for security advisories from the picoclaw project for patch availability

Evidence notes

The CVE description confirms the vulnerability location in pkg/tools/shell.go within the guardCommand() function. The incomplete denylist of 8 regular expressions is explicitly cited as the root cause. Release tag v0.1.2 is referenced as the affected version boundary.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-36045 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-36045

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-36045 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-36045

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.