PT-2026-60968 · Nextlevelbuilder · Goclaw

Erichen · CVE-2026-16121 · Published 2026-07-18 · Updated 2026-07-18

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file internal/tools/exec approval.go. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-16121

Affected Products

Goclaw

References · 8

• 🔥 https://github.com/nextlevelbuilder/goclaw/issues/1214 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16121 · Security Note
• https://github.com/nextlevelbuilder/goclaw/issues/1206 · Note
• https://vuldb.com/vuln/379830/cti · Note
• https://vuldb.com/cve/CVE-2026-16121 · Note
• https://vuldb.com/submit/856827 · Note
• https://github.com/nextlevelbuilder/goclaw · Note
• https://vuldb.com/vuln/379830 · Note