What is CVE-2026-15618?

CVE-2026-15618 is a medium-severity vulnerability in Mosaxiv Clawlet, classified under Protection Mechanism Failure. CVSS score: 6.3/10. Published 2026-07-14.

How severe is CVE-2026-15618?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Mosaxiv Clawlet

CVE-2026-15618

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/tool_exec.go of the component exec Safety Guard. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed with the label "not planned".

EPSS: 0.004 (34.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Mosaxiv Clawlet — versions 0.2.0, 0.2.1, 0.2.2

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (issue-tracking, exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-15618?: CVE-2026-15618 is a medium-severity vulnerability in Mosaxiv Clawlet, classified under Protection Mechanism Failure. CVSS score: 6.3/10. Published 2026-07-14.
How severe is CVE-2026-15618?: Medium severity. CVSS v3 base score is 6.3 out of 10.