Nextlevelbuilder Goclaw vulnerabilities

• nextlevelbuilder goclaw nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure CVE-2026-18038 5.3 MediumJuly 28, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization CVE-2026-16199 5.3 MediumJuly 19, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery CVE-2026-16124 5.3 MediumJuly 18, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization CVE-2026-16123 5.3 MediumJuly 18, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization CVE-2026-16122 4.8 MediumJuly 18, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization CVE-2026-16121 5.3 MediumJuly 18, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw exec_approval.go extractBin name resolution CVE-2026-16120 5.3 MediumJuly 18, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization CVE-2026-16119 5.3 MediumJuly 18, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw tool.go handleNavigate information disclosure CVE-2026-15627 5.3 MediumJuly 14, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal CVE-2026-15626 5.3 MediumJuly 14, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist CVE-2026-15625 5.3 MediumJuly 14, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery CVE-2026-15624 5.3 MediumJuly 14, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization CVE-2026-14716 5.3 MediumJuly 5, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication CVE-2026-10617 6.9 MediumJune 2, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization CVE-2026-10616 5.3 MediumJune 2, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery CVE-2026-10583 5.1 MediumJune 2, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection CVE-2026-10219 6.9 MediumJune 1, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization CVE-2026-10218 5.3 MediumJune 1, 2026
• nextlevelbuilder goclaw nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management CVE-2026-10217 5.3 MediumJune 1, 2026
• nextlevelbuilder goclaw, goclaw lite +1 more nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization CVE-2026-7505 6.9 MediumApril 30, 2026