CVE-2026-32231CWE-306CWE-345

ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data

High · published March 12, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

ZeptoClaw is a personal AI assistant. Prior to 0.7.6, the generic webhook channel trusts caller-supplied identity fields (sender, chat_id) from the request body and applies authorization checks to those untrusted values. Because authentication is optional and defaults to disabled (auth_token: None), an attacker who can reach POST /webhook can spoof an allowlisted sender and choose arbitrary chat_id values, enabling high-risk message spoofing and potential IDOR-style session/chat routing abuse. This vulnerability is fixed in 0.7.6.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Weaknesses
CWE-306 · Missing Authentication for Critical Function; CWE-345 · Insufficient Verification of Data Authenticity
Published
2026-03-12T18:22Z
EPSS history
Timeline
  • 12 MAR 18:22Z
    ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data
    cvelistv5