CyberRota Analysis
AI-GeneratedA vulnerability exists in the ExecTool.executeRun function of Sipeed PicoClaw versions up to 0.2.9, where improper handling of the argument 'cwe' can lead to a time-of-check time-of-use (TOCTOU) issue. This flaw requires local access to exploit and could potentially allow an attacker to manipulate execution flow. Organizations using affected versions should prioritize remediation, especially if they have local access controls that could be bypassed.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation of the argument cwe leads to time-of-check time-of-use. The attack must be carried out locally. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically with the label "not planned" by a bot.