Advisories · Technology
nextlevelbuilder GoClaw.
Every CVE that names nextlevelbuilder GoClaw among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure
- nextlevelbuilder GoClaw
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization
- nextlevelbuilder GoClaw
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery
- nextlevelbuilder GoClaw
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization
- nextlevelbuilder GoClaw
- Broken access control
- CVSS 4.8 Medium
nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization
- nextlevelbuilder GoClaw
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization
- nextlevelbuilder GoClaw
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw exec_approval.go extractBin name resolution
- nextlevelbuilder GoClaw
- CWE-706
- CVSS 5.3 Medium
nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization
- nextlevelbuilder GoClaw
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw tool.go handleNavigate information disclosure
- nextlevelbuilder GoClaw
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal
- nextlevelbuilder GoClaw
- Path traversal
- CVSS 5.3 Medium
nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist
- nextlevelbuilder GoClaw
- CWE-183
- CWE-184
- CVSS 5.3 Medium
nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery
- nextlevelbuilder GoClaw
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization
- nextlevelbuilder GoClaw
- Broken access control
- CVSS 6.9 Medium
nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication
- nextlevelbuilder GoClaw
- Authentication bypass
- CVSS 5.3 Medium
nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization
- nextlevelbuilder GoClaw
- Broken access control
- CVSS 5.1 Medium
nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery
- nextlevelbuilder GoClaw
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization
- nextlevelbuilder GoClaw
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management
- nextlevelbuilder GoClaw
- Privilege escalation
- CVSS 6.9 Medium
nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization
- nextlevelbuilder GoClaw
- nextlevelbuilder GoClaw Lite
- Privilege escalation
- Broken access control