Executive brief
mosaxiv clawlet is a lightweight AI assistant tool. A security flaw in its web-fetching component allows the software to be tricked into making unauthorized requests to internal network addresses. This could allow an attacker to probe private internal services or access sensitive data from the local network that is not intended to be public.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in the `web_fetch` function within `tools/tool_web_fetch.go` of mosaxiv clawlet. The root cause is an incomplete validation policy in `tools/web_fetch_policy.go` that only performs domain-pattern matching and fails to block special-use, private, or loopback IPv4 ranges. A remote attacker can influence the agent to request internal or non-public HTTP services by providing specific IPv4 literal addresses (e.g., 198.18.0.1). While a GitHub issue was opened to report this, the maintainers have marked it as 'not planned,' meaning no official patch is currently available.
Affected products
- mosaxiv clawlet <= 0.2.10
Timeline
- 2026-07-14: advisory: NVD publication date
- 2026-07-13: disclosed: GitHub issue reported and closed as not planned