PT-2026-45820 · Nextlevelbuilder · Goclaw

Eric-H · Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-10616

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function TeamTasksTool.executeComplete of the file internal/tools/team tasks lifecycle.go of the component Team Task Completion Handler. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The project tagged the reported issue as bug.

Exploit

Fix

Incorrect Authorization

Missing Authorization

Weakness Enumeration

CWE-863

CWE-862

Related Identifiers

CVE-2026-10616

Affected Products

Goclaw

References · 7

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1133 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10616 · Security Note
• https://vuldb.com/vuln/367925 · Note
• https://vuldb.com/vuln/367925/cti · Note
• https://github.com/nextlevelbuilder/goclaw · Note
• https://vuldb.com/cve/CVE-2026-10616 · Note
• https://vuldb.com/submit/829420 · Note