PT-2026-60969 · Nextlevelbuilder · Goclaw

Eric-G · CVE-2026-16122 · Publicado 2026-07-18 · Atualizado 2026-07-18

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function extractBin/RequestApproval/matchesAllowlist of the file internal/tools/exec approval.go. The manipulation results in incorrect authorization. The exploit has been released to the public and may be used for attacks.

Exploit

Correção

Incorrect Authorization

Improper Authorization

Enumeração de Fraquezas

CWE-863

CWE-285

Identificadores relacionados

CVE-2026-16122

Produtos afetados

Goclaw

Referências · 8

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1216 · Exploit
• https://github.com/nextlevelbuilder/goclaw/issues/1216#issuecomment-4760050291 · Nota
• https://vuldb.com/vuln/379831 · Nota
• https://vuldb.com/cve/CVE-2026-16122 · Nota
• https://vuldb.com/submit/856856 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16122 · Nota de Segurança
• https://vuldb.com/vuln/379831/cti · Nota
• https://github.com/nextlevelbuilder/goclaw · Nota