CVE-2026-15621

Name of the Vulnerable Software and Affected Versions mosaxiv clawlet versions prior to 0.2.11

Description The File Tools component contains an issue where the read file(), write file(), and edit file() functions in the tools/fs ops.go file are susceptible to link following. This occurs when a local attacker performs a manipulation that allows the application to follow symbolic links to unauthorized locations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.