{"vulnerability": "cve-2026-62241", "sightings": [{"uuid": "6bbf9095-5c7a-4a0b-aefa-f0c35b272d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsidieaof2d", "content": "CVE-2026-62241 - clawvet\nA self-hosted Clawvet API server is at risk of exposing user data if not updated to version 0.7.5 or later. An attacker can access a user's email address, subscription plan, and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#clawvet #mohibshaikh #CVE #infosec", "creation_timestamp": "2026-07-17T00:24:04.207614Z"}, {"uuid": "eb0d3f8a-88e1-47c7-baa8-af1bbd90134f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62241", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116932727657867490", "content": "MohibShaikh clawvet API server <0.7.5 (CVE-2026-62241) suffers a CRITICAL flaw: hard-coded JWT secret enables unauthenticated user data access and session cookie forgery. Change secrets & limit endpoint access. https://radar.offseq.com/threat/cve-2026-62241-missing-authentication-for-critical-b8ebafbae06b4bce #OffSeq #CVE202662241 #vuln", "creation_timestamp": "2026-07-17T01:30:26.634048Z"}, {"uuid": "ac9526ea-89d0-4311-b1b9-e68e9895edc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62241", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsm27phe52j", "content": "MohibShaikh clawvet API <0.7.5 has a CRITICAL flaw: attackers can forge JWTs & access sensitive user info. Change default JWT secret & restrict API endpoints now. https://radar.offseq.com/threat/cve-2026-62241-missing-authentication-for-critical-b8ebafbae06b4bce #OffSeq #CVE202662241", "creation_timestamp": "2026-07-17T01:30:28.729398Z"}, {"uuid": "0df24d68-dbff-403e-b9a8-c6d68bb78900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqst6txcff2e", "content": "CVE-2026-62241 - clawvet\nCVE ID : CVE-2026-62241\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the de...", "creation_timestamp": "2026-07-17T03:38:20.106358Z"}, {"uuid": "1219d980-3bdb-40ae-93b9-2b6e79b971a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz2aalmt32l", "content": "\ud83d\udd34 CVE-2026-62241 - Critical (9.1)\n\nclawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62241/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T15:00:21.645247Z"}]}