CVE-2026-15618

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/tool_exec.go of the component exec Safety Guard. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed with the label "not planned".

CVSS 4.0

2.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-25)

CWE

CWE-693

Published

2026-07-14

Modified

2026-10-24

Record from

the NVD, synced 2026-10-25

References

• https://github.com/mosaxiv/clawlet/
• https://github.com/mosaxiv/clawlet/issues/12
• https://vuldb.com/cve/CVE-2026-15618
• https://vuldb.com/submit/855792
• https://vuldb.com/vuln/378121

Check your stackJSON