CVE-2026-15620 — mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads…
Published: 2026-07-14 · CVSS: 5.3 · CVSS 4.0
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed with the label "not planned".
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7