CVE-2026-15622

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15622", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-07-13T17:01:54.313Z", "datePublished": "2026-07-14T01:15:13.193Z", "dateUpdated": "2026-07-14T12:36:09.742Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-14T01:15:13.193Z"}, "title": "poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-639", "lang": "en", "description": "Authorization Bypass"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-285", "lang": "en", "description": "Improper Authorization"}]}], "affected": [{"vendor": "poco-ai", "product": "poco-claw", "versions": [{"version": "0.5.0", "status": "affected"}, {"version": "0.5.1", "status": "affected"}, {"version": "0.5.2", "status": "affected"}, {"version": "0.5.3", "status": "affected"}, {"version": "0.5.4", "status": "affected"}], "cpes": ["cpe:2.3:a:poco-ai:poco-claw:*:*:*:*:*:*:*:*"], "modules": ["Workspace API"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace API. Executing a manipulation of the argument user_id can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Upgrading the affected component is recommended."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-07-13T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-07-13T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-07-13T19:06:57.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Eric-b (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/378125", "name": "VDB-378125 | poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/378125/cti", "name": "VDB-378125 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-15622", "name": "CVE-2026-15622 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/855797", "name": "Submit #855797 | Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/poco-ai/poco-claw/issues/133", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/poco-ai/poco-claw/pull/135", "tags": ["exploit", "issue-tracking", "patch"]}, {"url": "https://github.com/poco-ai/poco-claw/commit/67fcc88505c57f77d3fcf04eb5b89425b10cbf48", "tags": ["exploit", "patch"]}, {"url": "https://github.com/poco-ai/poco-claw/", "tags": ["exploit", "product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-14T12:35:57.855937Z", "id": "CVE-2026-15622", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T12:36:09.742Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-15622", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-14T12:35:57.855937Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T12:36:03.866Z"}}], "cna": {"tags": ["x_open-source"], "title": "poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization", "credits": [{"lang": "en", "type": "reporter", "value": "Eric-b (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:poco-ai:poco-claw:*:*:*:*:*:*:*:*"], "vendor": "poco-ai", "modules": ["Workspace API"], "product": "poco-claw", "versions": [{"status": "affected", "version": "0.5.0"}, {"status": "affected", "version": "0.5.1"}, {"status": "affected", "version": "0.5.2"}, {"status": "affected", "version": "0.5.3"}, {"status": "affected", "version": "0.5.4"}]}], "timeline": [{"lang": "en", "time": "2026-07-13T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-07-13T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-07-13T19:06:57.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/378125", "name": "VDB-378125 | poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/378125/cti", "name": "VDB-378125 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-15622", "name": "CVE-2026-15622 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/855797", "name": "Submit #855797 | Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/poco-ai/poco-claw/issues/133", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/poco-ai/poco-claw/pull/135", "tags": ["exploit", "issue-tracking", "patch"]}, {"url": "https://github.com/poco-ai/poco-claw/commit/67fcc88505c57f77d3fcf04eb5b89425b10cbf48", "tags": ["exploit", "patch"]}, {"url": "https://github.com/poco-ai/poco-claw/", "tags": ["exploit", "product"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace API. Executing a manipulation of the argument user_id can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Upgrading the affected component is recommended."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "Authorization Bypass"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "Improper Authorization"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-14T01:15:13.193Z"}}}, "cveMetadata": {"cveId": "CVE-2026-15622", "state": "PUBLISHED", "dateUpdated": "2026-07-14T12:36:09.742Z", "dateReserved": "2026-07-13T17:01:54.313Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-07-14T01:15:13.193Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:poco-ai:poco-claw:*:*:*:*:*:*:*:*"], "modules": ["Workspace API"], "product": "poco-claw", "vendor": "poco-ai", "versions": [{"status": "affected", "version": "0.5.0"}, {"status": "affected", "version": "0.5.1"}, {"status": "affected", "version": "0.5.2"}, {"status": "affected", "version": "0.5.3"}, {"status": "affected", "version": "0.5.4"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace API. Executing a manipulation of the argument user_id can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Upgrading the affected component is recommended."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad en poco-ai poco-claw hasta 0.5.4. Afectada es la funci\u00f3n get_workspace_file del archivo executor_manager/app/api/v1/workspace.py del componente API de Workspace. La ejecuci\u00f3n de una manipulaci\u00f3n del argumento user_id puede llevar a una omisi\u00f3n de autorizaci\u00f3n. El ataque puede lanzarse de forma remota. El exploit ha sido publicado y puede ser utilizado. Este parche se llama 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Se recomienda actualizar el componente afectado."}], "id": "CVE-2026-15622", "lastModified": "2026-10-24T22:10:00.210", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15622", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-14T12:35:57.855937Z", "version": "2.0.3"}}]}, "published": "2026-07-14T02:16:54.223", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/poco-ai/poco-claw/"}, {"source": "cna@vuldb.com", "url": "https://github.com/poco-ai/poco-claw/commit/67fcc88505c57f77d3fcf04eb5b89425b10cbf48"}, {"source": "cna@vuldb.com", "url": "https://github.com/poco-ai/poco-claw/issues/133"}, {"source": "cna@vuldb.com", "url": "https://github.com/poco-ai/poco-claw/pull/135"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-15622"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/855797"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/378125"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/378125/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}, {"lang": "en", "value": "CWE-639"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.4"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "poco-claw", "source": "cna", "vendor": "poco-ai"}, "product": "poco-claw", "vendor": "poco-ai"}], "created": "2026-07-14T12:45:10.358034+00:00", "updated": "2026-08-01T10:15:03.457755+00:00", "vendors": ["poco-ai", "poco-ai$PRODUCT$poco-claw"]}