Is CVE-2026-15620 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15620?

CVE-2026-15620 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-15620

Description

A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed with the label "not planned".