CVE-2026-15621

EUVD-2026-43598
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was closed with the label "not planned".
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Common Weakness Enumeration
References
https://github.com/mosaxiv/clawlet/
https://github.com/mosaxiv/clawlet/issues/15
https://vuldb.com/cve/CVE-2026-15621
https://vuldb.com/submit/855796
https://vuldb.com/vuln/378124
https://vuldb.com/vuln/378124/cti
https://github.com/mosaxiv/clawlet/issues/15