nextlevelbuilder GoClaw vulnerabilities

Newest CVEs

• CVE-2026-18038

  nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-16199

  nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-16124

  nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-16123

  nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-16122

  nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization

  nextlevelbuilder · GoClaw

  Medium4.8
• CVE-2026-16121

  nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-16120

  nextlevelbuilder GoClaw exec_approval.go extractBin name resolution

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-16119

  nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-15627

  nextlevelbuilder GoClaw tool.go handleNavigate information disclosure

  nextlevelbuilder · GoClaw

  Medium5.3
• CVE-2026-15626

  nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal

  nextlevelbuilder · GoClaw

  Medium5.3