CVE-2026-15622: poco-ai poco-claw authorization bypass in Workspace API

CVE-2026-15622 · Severity: medium · CVSS 5.3 · Published 2026-07-14

A security flaw was identified in poco-claw, an AI agent platform, specifically within its Executor Manager component. This vulnerability allows an unauthorized person to access and download files from other users' private workspaces by manipulating user identification numbers in web requests. This could lead to the exposure of sensitive project data or personal information stored within the platform's collaborative environment.

Technologies: Poco-Ai Claw. Vendors: Poco-Ai.

Quick answers

Is CVE-2026-15622 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-15622 being exploited in the wild.
How severe is CVE-2026-15622?
Medium severity, with a CVSS score of 5.3, published 14 July 2026.
Which products and versions are affected?
Poco-Ai Claw up to 0.5.4.
Is there a fix for CVE-2026-15622?
A patch was published on 2026-06-11: Fix committed to repository Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-15622 attacked?
It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-15622?
Check whether you run Poco-Ai Claw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An authorization bypass vulnerability exists in the `get_workspace_file` function within `executor_manager/app/api/v1/workspace.py` of poco-claw. The Workspace API trusts caller-supplied `user_id` and `session_id` path parameters without verifying the requester's identity or permissions. While the application implements path sanitization to prevent directory traversal, it fails to enforce identity binding, allowing a remote, unauthenticated attacker to retrieve files from any workspace if the `user_id` and `session_id` are known or guessed. The issue is addressed by requiring internal tokens (`X-Internal-Token`) for control-plane routes and callback tokens for executor proxy routes.

Affected products

  • poco-ai poco-claw up to 0.5.4

Timeline

  • 2026-06-10: disclosed: Issue reported on GitHub by YLChen-007
  • 2026-06-11: patched: Fix committed to repository
  • 2026-07-14: advisory: NVD/VulDB advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.