PT-2026-57934 · Mosaxiv · Clawlet

Eric-B · Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-15621

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read file/write file/edit file of the file tools/fs ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was closed with the label "not planned".

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-15621

Affected Products

Clawlet

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-15621 · Security Note
• https://github.com/mosaxiv/clawlet/issues/15 · Note
• https://vuldb.com/cve/CVE-2026-15621 · Note
• https://vuldb.com/vuln/378124 · Note
• https://vuldb.com/vuln/378124/cti · Note
• https://vuldb.com/submit/855796 · Note
• https://github.com/mosaxiv/clawlet · Note