CVE-2026-15620
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Jul 14, 2026
Vendor
unknown
Description
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed with the label "not planned".