CVE-2026-16017

MEDIUM 6.3

mosaxiv clawlet cron Chat Tool tool_cron.go remove authorization

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. Impacted is the function list/remove of the file tools/tool_cron.go of the component cron Chat Tool. The manipulation results in missing authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed with the label "not planned".

CWE	CWE-862 CWE-863
Vendor	mosaxiv
Product	clawlet
Published	Jul 17, 2026

Stay Ahead of the Next One

Get instant alerts for mosaxiv clawlet

Be the first to know when new medium vulnerabilities affecting mosaxiv clawlet are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

mosaxiv / clawlet

0.2.0 0.2.1 0.2.2 0.2.3 0.2.4 0.2.5 0.2.6 0.2.7 0.2.8 0.2.9 0.2.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/379759 vuldb.com: https://vuldb.com/vuln/379759/cti vuldb.com: https://vuldb.com/cve/CVE-2026-16017 vuldb.com: https://vuldb.com/submit/856824 github.com: https://github.com/mosaxiv/clawlet/issues/17 github.com: https://github.com/mosaxiv/clawlet/

Credits

🔍 Erichen (VulDB User) VulDB CNA Team