| タイトル | mosaxiv clawlet 0.2.10 Improper Link Resolution Before File Access (CWE-59) |
|---|
| 説明 | # Technical Details
An improper link resolution vulnerability exists in the workspace path enforcement used by file tools in `tools/fs_ops.go`, reached through `tools.Registry.Execute` in `tools/registry.go`, of clawlet.
The application fails to detect hardlink aliases that point to files outside the configured workspace. The workspace guard resolves symlinks and checks that the final path appears under the workspace, but it does not verify whether the file inode is also reachable from outside the workspace through a hardlink.
# Vulnerable Code
File: `tools/fs_ops.go`, `tools/registry.go`
Method: `(*Registry).resolvePath`, `(*Registry).readFile`, `(*Registry).writeFile`, `(*Registry).editFile`, `(*Registry).Execute`
Why: `resolvePath` uses `filepath.EvalSymlinks` and path-prefix checks, which catch symlink escapes but not hardlinks. Once a workspace-looking path is accepted, the file tools call `os.ReadFile` or write operations on the resolved path without checking inode aliasing.
# Reproduction
1. On a Unix-like filesystem supporting hardlinks, create an out-of-workspace file such as `outside-secret.txt`.
2. Create `workspace/linked.txt` as a hardlink to that outside file, then trigger the real file-tool APIs through `tools.Registry.Execute` using the in-workspace path `linked.txt`.
3. Confirm that `read_file`, `write_file`, or `edit_file` operate on the outside file even though `tools.restrictToWorkspace=true` is enabled.
# Impact
- Files outside the intended workspace can be read or modified through in-workspace aliases.
- Configuration files, credentials, scripts, or task definitions outside the workspace can be poisoned.
- The workspace boundary relied on by operators is bypassed on same-filesystem targets. |
|---|
| ソース | ⚠️ https://github.com/mosaxiv/clawlet/issues/15 |
|---|
| ユーザー | Eric-b (UID 96354) |
|---|
| 送信 | 2026年06月11日 09:05 (1 月 ago) |
|---|
| モデレーション | 2026年07月13日 18:57 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 378124 [mosaxiv clawlet 迄 0.2.10 File Tools tools/fs_ops.go read_file/write_file/edit_file 特権昇格] |
|---|
| ポイント | 20 |
|---|