PT-2026-45821 · Nextlevelbuilder · Goclaw

Eric-H · Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-10617

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.

Exploit

Fix

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

CVE-2026-10617

Affected Products

Goclaw

References · 7

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1134 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10617 · Security Note
• https://vuldb.com/vuln/367926/cti · Note
• https://vuldb.com/vuln/367926 · Note
• https://github.com/nextlevelbuilder/goclaw · Note
• https://vuldb.com/cve/CVE-2026-10617 · Note
• https://vuldb.com/submit/829421 · Note