nextlevelbuilder

Products

ProductCVEsExploitedLatest
GoClaw20–Jul 28, 2026
ui-ux-pro-max-skill2–May 1, 2026
GoClaw Lite1–Apr 30, 2026

Exploited and recent CVEs

  • CVE-2026-18038 Medium 4.3 nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure 0.4%
  • CVE-2026-16199 Medium 6.3 nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization 0.4%
  • CVE-2026-16124 Medium 6.3 nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery 0.5%
  • CVE-2026-16123 Medium 6.3 nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization 0.4%
  • CVE-2026-16122 Medium 4.3 nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization 0.3%
  • CVE-2026-16121 Medium 6.3 nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization 0.4%
  • CVE-2026-16120 Medium 6.3 nextlevelbuilder GoClaw exec_approval.go extractBin name resolution 0.4%
  • CVE-2026-16119 Medium 6.3 nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization 0.4%
  • CVE-2026-15627 Medium 4.3 nextlevelbuilder GoClaw tool.go handleNavigate information disclosure 0.4%
  • CVE-2026-15626 Medium 6.3 nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal 0.4%
  • CVE-2026-15625 Medium 6.3 nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist 0.5%
  • CVE-2026-15624 Medium 6.3 nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery 0.4%
  • CVE-2026-14716 Medium 6.3 nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization 0.4%
  • CVE-2026-10617 High 7.3 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication 0.4%
  • CVE-2026-10616 Medium 4.3 nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization 0.2%
  • CVE-2026-10583 Medium 4.7 nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery 0.2%
  • CVE-2026-10219 High 7.3 nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection 1.5%
  • CVE-2026-10218 Medium 5.4 nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization 0.2%
  • CVE-2026-10217 Medium 6.3 nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management 0.2%
  • CVE-2026-7596 Medium 4.3 nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting 0.4%
  • CVE-2026-7595 Medium 6.3 nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection 0.2%
  • CVE-2026-7505 High 7.3 nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization 0.4%
  • CVE-2026-7505 High 7.3 nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization 0.4%