# CVE-2026-16017: mosaxiv clawlet missing authorization in cron Chat Tool

Source: https://junglewise.ai/threats/cve-2026-16017-mosaxiv-clawlet-missing-authorization-in-cron-chat-tool  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-17. Updated: 2026-07-17  
License: CC BY 4.0 with a link back

CVE-2026-16017 · Severity: medium · CVSS 6.3 · Published 2026-07-17

mosaxiv clawlet is an AI assistant tool that allows users to schedule automated tasks via chat. A security flaw in the scheduling component allows one user to view and delete the scheduled tasks of other users. This could lead to the unauthorized disclosure of task details or the disruption of automated workflows by deleting legitimate jobs.

Technologies: [Mosaxiv Clawlet](https://junglewise.ai/threats/technologies/clawlet). Vendors: [Mosaxiv](https://junglewise.ai/threats/vendors/mosaxiv).

## Quick answers

**Is CVE-2026-16017 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-16017 being exploited in the wild.

**How severe is CVE-2026-16017?** Medium severity, with a CVSS score of 6.3, published 17 July 2026.

**Which products and versions are affected?** Mosaxiv Clawlet up to 0.2.10.

**Is there a fix for CVE-2026-16017?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-16017 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-16017?** Check whether you run Mosaxiv Clawlet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A missing authorization vulnerability exists in the `list` and `remove` functions within `tools/tool_cron.go` of mosaxiv clawlet. While the application correctly records ownership metadata (channel and chat ID) when a cron job is created, it fails to validate these ownership fields during management operations. An authenticated attacker can remotely invoke the `list` command to enumerate all scheduled jobs in the shared store and subsequently use the `remove` command with a leaked job ID to delete tasks belonging to other users. The issue is present in version 0.2.10 and earlier; as of the advisory date, the maintainer has labeled the issue as 'not planned' for fixing.

## Affected products

- mosaxiv clawlet up to 0.2.10

## Timeline

- 2026-07-17: advisory: NVD and VulDB published the vulnerability details.
- 2026-07-17: disclosed: Public exploit details and PoC released.

## References

- [https://github.com/mosaxiv/clawlet/](https://github.com/mosaxiv/clawlet/)
- [https://github.com/mosaxiv/clawlet/issues/17](https://github.com/mosaxiv/clawlet/issues/17)
- [https://vuldb.com/cve/CVE-2026-16017](https://vuldb.com/cve/CVE-2026-16017)
- [https://vuldb.com/submit/856824](https://vuldb.com/submit/856824)
- [https://vuldb.com/vuln/379759](https://vuldb.com/vuln/379759)
- [https://vuldb.com/vuln/379759/cti](https://vuldb.com/vuln/379759/cti)

## Related threats

- [mosaxiv clawlet workspace bypass via hardlink in File Tools](https://junglewise.ai/threats/cve-2026-15621-mosaxiv-clawlet-workspace-bypass-via-hardlink-in-file-tools)
- [mosaxiv clawlet SSRF in tools.webFetch](https://junglewise.ai/threats/cve-2026-15620-mosaxiv-clawlet-ssrf-in-tools-webfetch)
- [mosaxiv clawlet SSRF in web_fetch function](https://junglewise.ai/threats/cve-2026-15619-mosaxiv-clawlet-ssrf-in-web-fetch-function)
- [mosaxiv clawlet protection mechanism failure in guardExecCommand](https://junglewise.ai/threats/cve-2026-15618-mosaxiv-clawlet-protection-mechanism-failure-in-guardexeccommand)