PT-2026-57956 · Nextlevelbuilder · Goclaw

Eric-E · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15627

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used.

Exploit

Correção

Information Disclosure

Improper Access Control

Enumeração de Fraquezas

CWE-200

CWE-284

Identificadores relacionados

CVE-2026-15627

Produtos afetados

Goclaw

Referências · 8

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1207 · Exploit
• https://github.com/nextlevelbuilder/goclaw/issues/1207#issuecomment-4760370546 · Nota
• https://vuldb.com/vuln/378129/cti · Nota
• https://github.com/nextlevelbuilder/goclaw · Nota
• https://vuldb.com/vuln/378129 · Nota
• https://vuldb.com/submit/855847 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15627 · Nota de Segurança
• https://vuldb.com/cve/CVE-2026-15627 · Nota