Search results

[Security] Picobot exec tool dangerous-program blacklist bypass via env and bash -lc dispatch

Status: Open.

#43 In louisho5/picobot;

· YLChen-007 opened on Jun 10, 2026

[Security] Picobot exec tool shell-wrapper bypass allows arbitrary command execution

Status: Open.

#42 In louisho5/picobot;

· YLChen-007 opened on Jun 10, 2026

[Security] Picobot web Tool Performs Unrestricted Localhost and Internal Network Fetches via Model-Controlled URL

Status: Open.

#41 In louisho5/picobot;

· YLChen-007 opened on Jun 10, 2026

[Security] Workspace hardlink alias bypass in Picobot filesystem and skill tools allows out-of-workspace file read and overwrite

Status: Open.

#40 In louisho5/picobot;

· YLChen-007 opened on Jun 10, 2026

[Security] Picobot web tool allows SSRF to special-use and local IPv4 addresses through tool-calling flows

Status: Open.

#39 In louisho5/picobot;

· YLChen-007 opened on Jun 10, 2026

Default RequestTimeoutS might be too low

Status: Open.

#38 In louisho5/picobot;

· Rikul opened on Apr 1, 2026

Support for Codex Auth instead of OpenAI API keys

Status: Open.

#27 In louisho5/picobot;

· rockelectroo opened on Mar 7, 2026

Downloaded latest Binary from release for Termux use

Status: Open.

#24 In louisho5/picobot;

· mad1mystic opened on Feb 25, 2026