PT-2026-57956 · Nextlevelbuilder · Goclaw

Eric-E · Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-15627

Mitre

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used.

Exploit

Fix

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

CVE-2026-15627

Affected Products

Goclaw

References · 8

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1207 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15627 · Security Note
• https://github.com/nextlevelbuilder/goclaw/issues/1207#issuecomment-4760370546 · Note
• https://vuldb.com/vuln/378129/cti · Note
• https://github.com/nextlevelbuilder/goclaw · Note
• https://vuldb.com/vuln/378129 · Note
• https://vuldb.com/submit/855847 · Note
• https://vuldb.com/cve/CVE-2026-15627 · Note