What’s Vulnerable › Products
nextlevelbuilder GoClaw vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your nextlevelbuilder GoClaw version is affected
Latest nextlevelbuilder GoClaw vulnerabilities
- CVE-2026-18038 — nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure (CVSS 4.3)
- CVE-2026-16199 — nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization (CVSS 6.3)
- CVE-2026-16124 — nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery (CVSS 6.3)
- CVE-2026-16123 — nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization (CVSS 6.3)
- CVE-2026-16122 — nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization (CVSS 4.3)
- CVE-2026-16121 — nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization (CVSS 6.3)
- CVE-2026-16120 — nextlevelbuilder GoClaw exec_approval.go extractBin name resolution (CVSS 6.3)
- CVE-2026-16119 — nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization (CVSS 6.3)
- CVE-2026-15627 — nextlevelbuilder GoClaw tool.go handleNavigate information disclosure (CVSS 4.3)
- CVE-2026-15626 — nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal (CVSS 6.3)
- CVE-2026-15625 — nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist (CVSS 6.3)
- CVE-2026-15624 — nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery (CVSS 6.3)
- CVE-2026-14716 — nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization (CVSS 6.3)
- CVE-2026-10617 — nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication (CVSS 7.3)
- CVE-2026-10616 — nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization (CVSS 4.3)
- CVE-2026-10583 — nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery (CVSS 4.7)
- CVE-2026-10219 — nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection (CVSS 7.3)
- CVE-2026-10218 — nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization (CVSS 5.4)
- CVE-2026-10217 — nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management (CVSS 6.3)
- CVE-2026-7505 — nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization (CVSS 7.3)