Riskcovery

CVE-2026-32231

ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data

State
Published
Severity
8.2 High
Published
Mar 12, 2026
Updated
Mar 12, 2026
Reserved
Mar 11, 2026

Read the record on cve.org

Description

ZeptoClaw is a personal AI assistant. Prior to 0.7.6, the generic webhook channel trusts caller-supplied identity fields (sender, chat_id) from the request body and applies authorization checks to those untrusted values. Because authentication is optional and defaults to disabled (auth_token: None), an attacker who can reach POST /webhook can spoof an allowlisted sender and choose arbitrary chat_id values, enabling high-risk message spoofing and potential IDOR-style session/chat routing abuse. This vulnerability is fixed in 0.7.6.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:NGitHub_M

Weaknesses

  • CWE-306 Missing Authentication for Critical Function
  • CWE-345 Insufficient Verification of Data Authenticity

Affected Products

ProductVersions
zeptoclawqhkm
  • < 0.7.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.