Executive brief
mosaxiv clawlet is an AI assistant tool that allows users to schedule automated tasks via chat. A security flaw in the scheduling component allows one user to view and delete the scheduled tasks of other users. This could lead to the unauthorized disclosure of task details or the disruption of automated workflows by deleting legitimate jobs.
Technical details
A missing authorization vulnerability exists in the `list` and `remove` functions within `tools/tool_cron.go` of mosaxiv clawlet. While the application correctly records ownership metadata (channel and chat ID) when a cron job is created, it fails to validate these ownership fields during management operations. An authenticated attacker can remotely invoke the `list` command to enumerate all scheduled jobs in the shared store and subsequently use the `remove` command with a leaked job ID to delete tasks belonging to other users. The issue is present in version 0.2.10 and earlier; as of the advisory date, the maintainer has labeled the issue as 'not planned' for fixing.
Affected products
- mosaxiv clawlet up to 0.2.10
Timeline
- 2026-07-17: advisory: NVD and VulDB published the vulnerability details.
- 2026-07-17: disclosed: Public exploit details and PoC released.