EUVD-2026-43582
GHSA-q2gc-2p96-wxg9
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-exploitable SSRF requiring low-privilege authentication; limited impact scoped to vulnerable system with no lateral scope change.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/tool_web_fetch.go. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed with the label "not planned".
AnalysisAI
Server-side request forgery in mosaxiv clawlet up to version 0.2.10 enables authenticated remote attackers to manipulate the webFetch tool function to issue arbitrary HTTP requests from the server, potentially reaching internal services, cloud metadata endpoints, or other network resources not directly accessible to the attacker. A publicly available proof-of-concept exploit was disclosed via GitHub issue #14, making real-world exploitation more accessible. Critically, the upstream maintainer closed the issue as 'not planned,' meaning no vendor-released patch is forthcoming and the vulnerability will remain permanently unaddressed in the existing codebase.
Technical ContextAI
The vulnerability is rooted in CWE-918 (Server-Side Request Forgery), affecting the tools.webFetch function implemented in tools/tool_web_fetch.go within the mosaxiv clawlet project. The webFetch function accepts user-supplied URLs or targets and forwards HTTP requests on behalf of the server without adequate validation, allowlisting, or block-listing of destination addresses. This allows the server process to be weaponized as a proxy to probe internal infrastructure. The CPE cpe:2.3:a:mosaxiv:clawlet:*:*:*:*:*:*:*:* encompasses all released versions through 0.2.10. SSRF vulnerabilities of this class are particularly dangerous in cloud-hosted deployments where instance metadata services (e.g., AWS IMDSv1 at 169.254.169.254) are reachable from the server but not from external networks.
RemediationAI
No vendor-released patch is available and none is planned, as the upstream maintainer closed the GitHub issue (#14) as 'not planned.' Organizations using clawlet should consider migrating away from the tool or implementing compensating controls at the network and application layers. Specifically: restrict outbound HTTP requests from the clawlet process using egress firewall rules that block access to RFC 1918 private address ranges and cloud metadata IP addresses (169.254.169.254, 100.100.100.200 for Alibaba Cloud). If cloud-hosted, enforce IMDSv2 (instance metadata service v2) with hop-limit restrictions to prevent metadata access via SSRF. Restrict access to the webFetch functionality to only explicitly trusted users or disable it entirely if not operationally required. These controls add operational complexity but are the only available mitigations given the absence of a patch. See VulDB advisory at https://vuldb.com/vuln/378123 for additional context.
Missing authorization in mosaxiv clawlet up to version 0.2.10 allows low-privileged remote attackers to list and remove
Link-following vulnerability in mosaxiv clawlet up to version 0.2.10 allows local low-privileged attackers to read, writ
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today