CVE-2026-15622

poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization

View on CVE.org
Published Jul 14, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace API. Executing a manipulation of the argument user_id can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Upgrading the affected component is recommended.

Analysis

AI-generated

Technical impact

A flaw in poco‑ai poco‑claw’s Workspace API allows manipulation of the user_id argument in the get_workspace_file endpoint to bypass authorization checks, granting an attacker unauthorized read access to files belonging to other users. The vulnerability can lead to confidentiality compromise without the need for elevated privileges or local access.

Affected Systems

This vulnerability impacts poco‑ai poco‑claw versions up to and including 0.5.4. The affected function is get_workspace_file within the Workspace API component.

Risk and Exploitability

6.9 classifies it as medium severity. The EPSS score is < 1%, indicating a very low but non‑zero exploitation probability. An exploit has been publicly demonstrated and may be used. Attack can be launched remotely through the exposed API by supplying an arbitrary user_id, and does not require additional credentials. The vulnerability is not listed in the CISA KEV catalog, but the prior public release suggests a high potential for abuse.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the official patch from commit 67fcc88505c57f77d3fcf04eb5b89425b10cbf48; this resolves issues that lead to CWE-285 and CWE-639 flaws.
  • Ensure the user_id parameter is not accepted from client requests or, if required, verify that the supplied user_id matches the authenticated user and that the user has permission to access the requested workspace; this mitigates the authorization bypass embodied in CWE-285.
  • Enforce a default‑deny policy in the Workspace API, validating that the requester has ownership or membership rights to the workspace before serving files; this addresses the privilege‑check failure captured by CWE-639.

Generated by OpenCVE AI on August 1, 2026 at 10:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace API. Executing a manipulation of the argument user_id can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Upgrading the affected component is recommended.
Title poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization
First Time appeared Poco-ai
Poco-ai poco-claw
Weaknesses CWE-285
CWE-639
CPEs cpe:2.3:a:poco-ai:poco-claw:*:*:*:*:*:*:*:*
Vendors & Products Poco-ai
Poco-ai poco-claw
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-285

    Improper Authorization

  • CWE-639

    Authorization Bypass Through User-Controlled Key

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jul 14, 2026, 12:36 PM
Reserved
Jul 13, 2026, 5:01 PM

View source JSON

Updated
Jul 14, 2026, 12:36 PM

JSON

Status
Deferred
Published
Jul 14, 2026, 2:16 AM
Modified
Oct 24, 2026, 10:10 PM

View source JSON

No data.

Updated
Aug 1, 2026, 10:15 AM

JSON