Junglewise Threat Intelligence

CVE-2026-15622: poco-ai poco-claw authorization bypass in Workspace API

CVE-2026-15622 · Severity: medium · CVSS 5.3 · Published 2026-07-14

Technologies: Poco-Ai Claw. Vendors: Poco-Ai.

Executive brief

A security flaw was identified in poco-claw, an AI agent platform, specifically within its Executor Manager component. This vulnerability allows an unauthorized person to access and download files from other users' private workspaces by manipulating user identification numbers in web requests. This could lead to the exposure of sensitive project data or personal information stored within the platform's collaborative environment.

Technical details

An authorization bypass vulnerability exists in the `get_workspace_file` function within `executor_manager/app/api/v1/workspace.py` of poco-claw. The Workspace API trusts caller-supplied `user_id` and `session_id` path parameters without verifying the requester's identity or permissions. While the application implements path sanitization to prevent directory traversal, it fails to enforce identity binding, allowing a remote, unauthenticated attacker to retrieve files from any workspace if the `user_id` and `session_id` are known or guessed. The issue is addressed by requiring internal tokens (`X-Internal-Token`) for control-plane routes and callback tokens for executor proxy routes.

Affected products

  • poco-ai poco-claw up to 0.5.4

Timeline

  • 2026-06-10: disclosed: Issue reported on GitHub by YLChen-007
  • 2026-06-11: patched: Fix committed to repository
  • 2026-07-14: advisory: NVD/VulDB advisory published

References

Related threats