EUVD-2026-43581
GHSA-5293-6wqf-75gr
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible SSRF requiring user interaction to trigger; unchanged scope with low C/I/A impact consistent with constrained SSRF reach.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
Lifecycle Timeline
1DescriptionCVE.org
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the file tools/tool_web_fetch.go of the component IPv4 Handler. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed with the label "not planned".
AnalysisAI
Server-side request forgery in mosaxiv clawlet up to version 0.2.10 allows remote attackers to manipulate the server into issuing arbitrary HTTP requests by supplying a crafted URL to the web_fetch function in tools/tool_web_fetch.go via the IPv4 Handler. The CVSS 4.0 score of 2.1 reflects limited practical impact, constrained further by a user-interaction requirement (UI:P) and low CIA impact metrics. Publicly available exploit code exists (E:P per CVSS 4.0 supplemental vector), and the upstream maintainer has closed the tracking issue as 'not planned', meaning no official fix will be released.
Technical ContextAI
clawlet is a Go-based toolset hosted at github.com/mosaxiv/clawlet. The vulnerable component is the web_fetch function defined in tools/tool_web_fetch.go, which handles IPv4 URL requests on behalf of the server without sufficiently validating or restricting the url argument supplied by the caller. The root cause is CWE-918 (Server-Side Request Forgery): the application fetches a remote resource using attacker-controlled input, enabling the server to be redirected toward arbitrary endpoints - including internal network addresses, cloud metadata services (e.g., 169.254.169.254), or loopback interfaces - that the attacker could not directly reach. No CPE string was provided by the reporter; affected scope is limited to clawlet versions through 0.2.10 based on VulDB and NVD data.
RemediationAI
No vendor-released patch has been identified at time of analysis, and none is planned - the GitHub issue tracking this vulnerability (https://github.com/mosaxiv/clawlet/issues/13) was explicitly closed as 'not planned'. Operators should consider removing or disabling the web_fetch tool component entirely if it is not required for their use case, which eliminates the attack surface at the cost of losing that functionality. If web_fetch must remain active, implement strict egress firewall rules on the host running clawlet to block outbound connections to RFC-1918 private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), loopback (127.0.0.0/8), and cloud metadata endpoints (169.254.169.254), limiting the usefulness of forged requests to external targets only. Restricting which users or services can invoke web_fetch via access controls at the application or network layer reduces the UI:P interaction surface. Monitoring outbound HTTP traffic from the clawlet process for anomalous internal-targeting requests provides detection capability without blocking functionality.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today