PT-2026-60968 · Nextlevelbuilder · Goclaw

Erichen · CVE-2026-16121 · Publicado 2026-07-18 · Atualizado 2026-07-18

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file internal/tools/exec approval.go. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Exploit

Correção

Improper Authorization

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-285

CWE-266

Identificadores relacionados

CVE-2026-16121

Produtos afetados

Goclaw

Referências · 8

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1214 · Exploit
• https://github.com/nextlevelbuilder/goclaw/issues/1206 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16121 · Nota de Segurança
• https://vuldb.com/vuln/379830/cti · Nota
• https://vuldb.com/cve/CVE-2026-16121 · Nota
• https://vuldb.com/submit/856827 · Nota
• https://github.com/nextlevelbuilder/goclaw · Nota
• https://vuldb.com/vuln/379830 · Nota