PT-2026-57922 · Mosaxiv · Clawlet

Eric-B · Published 2026-07-13 · Updated 2026-07-14 · CVE-2026-15618

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/tool exec.go of the component exec Safety Guard. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed with the label "not planned".

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2026-15618

Affected Products

Clawlet

References · 7

• 🔥 https://github.com/mosaxiv/clawlet/issues/12 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15618 · Security Note
• https://vuldb.com/submit/855792 · Note
• https://vuldb.com/cve/CVE-2026-15618 · Note
• https://vuldb.com/vuln/378121/cti · Note
• https://vuldb.com/vuln/378121 · Note
• https://github.com/mosaxiv/clawlet · Note