CVE-2026-15621CWE-59

mosaxiv clawlet File Tools fs_ops.go edit_file link following

Medium · published July 14, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was closed with the label "not planned".

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00172 · 6.3th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-07-14T00:45Z
EPSS history
Timeline
  • 14 JUL 00:45Z
    mosaxiv clawlet File Tools fs_ops.go edit_file link following
    cvelistv5