What’s Vulnerable › Vulnerabilities

CVE-2026-15627: nextlevelbuilder GoClaw tool.go handleNavigate information disclosure

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-14 · updated 2026-10-24
• Weakness: CWE-200

Description

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used.

Affected products

• nextlevelbuilder GoClaw: 3.13.3-beta.0, 3.13.3-beta.1, 3.13.3-beta.2, 3.13.3-beta.3

References

• https://github.com/nextlevelbuilder/goclaw/
• https://github.com/nextlevelbuilder/goclaw/issues/1207
• https://github.com/nextlevelbuilder/goclaw/issues/1207#issuecomment-4760370546
• https://vuldb.com/cve/CVE-2026-15627
• https://vuldb.com/submit/855847
• https://vuldb.com/vuln/378129
• https://vuldb.com/vuln/378129/cti

Get alerted when CVE-2026-15627 or the next vulnerability affects your stack