PT-2026-57955 · Nextlevelbuilder · Goclaw

Eric-B · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15626

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file internal/providers/acp/tool bridge.go of the component ACP ToolBridge Workspace Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-15626

Produtos afetados

Goclaw

Referências · 8

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1201 · Exploit
• https://github.com/nextlevelbuilder/goclaw/issues/1201#issuecomment-4760748680 · Nota
• https://vuldb.com/cve/CVE-2026-15626 · Nota
• https://vuldb.com/submit/855805 · Nota
• https://vuldb.com/vuln/378128/cti · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15626 · Nota de Segurança
• https://vuldb.com/vuln/378128 · Nota
• https://github.com/nextlevelbuilder/goclaw · Nota