nextlevelbuilder GoClaw

• CVE-2026-18038 Medium 4.3 nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure 0.4%
• CVE-2026-16199 Medium 6.3 nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization 0.4%
• CVE-2026-16124 Medium 6.3 nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery 0.5%
• CVE-2026-16123 Medium 6.3 nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization 0.4%
• CVE-2026-16122 Medium 4.3 nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization 0.3%
• CVE-2026-16121 Medium 6.3 nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization 0.4%
• CVE-2026-16120 Medium 6.3 nextlevelbuilder GoClaw exec_approval.go extractBin name resolution 0.4%
• CVE-2026-16119 Medium 6.3 nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization 0.4%
• CVE-2026-15627 Medium 4.3 nextlevelbuilder GoClaw tool.go handleNavigate information disclosure 0.4%
• CVE-2026-15626 Medium 6.3 nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal 0.4%
• CVE-2026-15625 Medium 6.3 nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist 0.5%
• CVE-2026-15624 Medium 6.3 nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery 0.4%
• CVE-2026-14716 Medium 6.3 nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization 0.4%
• CVE-2026-10617 High 7.3 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication 0.4%
• CVE-2026-10616 Medium 4.3 nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization 0.2%
• CVE-2026-10583 Medium 4.7 nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery 0.2%
• CVE-2026-10219 High 7.3 nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection 1.5%
• CVE-2026-10218 Medium 5.4 nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization 0.2%
• CVE-2026-10217 Medium 6.3 nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management 0.2%
• CVE-2026-7505 High 7.3 nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization 0.4%