CVE-2026-15621mediumCWE-59

CVE-2026-15621: falha de média gravidade em mosaxiv clawlet

mosaxiv clawlet File Tools fs_ops.go edit_file link following

Publicada em

Seguir esta CVE+ Monitorar clawlet

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.2%
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was closed with the label "not planned".
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
mosaxiv · clawlet
CVEs relacionadas — mosaxiv clawlet

No mesmo produto, das mais perigosas para as menos.

CVE-2026-15619MEDIUMmosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgeryEPSS 0.4%CVE-2026-15618MEDIUMmosaxiv clawlet exec Safety Guard tool_exec.go guardExecCommand protection mechanismEPSS 0.4%CVE-2026-15620MEDIUMmosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgeryEPSS 0.4%CVE-2026-16017MEDIUMmosaxiv clawlet cron Chat Tool tool_cron.go remove authorizationEPSS 0.4%