EUVD-2026-43613
GHSA-jj94-w7r6-q859
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible SSRF requiring low-privilege auth (PR:L); scope changes because the server proxies requests to otherwise-unreachable internal systems (S:C); no direct availability impact.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function bytePlusDownloadVideo of the file internal/tools/create_video_byteplus.go of the component invoke Endpoint. The manipulation of the argument output.video_url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
AnalysisAI
Server-side request forgery in GoClaw 3.13.3-beta.3 enables authenticated remote attackers to manipulate the output.video_url parameter within the bytePlusDownloadVideo function, coercing the server into issuing HTTP requests to attacker-controlled destinations including internal network resources. The flaw resides in internal/tools/create_video_byteplus.go at the invoke endpoint. A proof-of-concept exploit has been publicly disclosed via GitHub issue #1199; however, no CISA KEV listing confirms mass active exploitation, and the CVSS 4.0 score of 2.1 reflects the low-privilege authentication barrier and limited per-request impact scope.
Technical ContextAI
GoClaw is a Go-based application by nextlevelbuilder that integrates with BytePlus, a ByteDance cloud media service. The vulnerable function bytePlusDownloadVideo in internal/tools/create_video_byteplus.go accepts a user-supplied output.video_url argument at the invoke endpoint and passes it to an outbound HTTP client without adequate validation or destination allowlisting, constituting CWE-918 (Server-Side Request Forgery). This class of vulnerability allows the server to act as an HTTP proxy, potentially reaching RFC-1918 private addresses, cloud instance metadata endpoints (e.g., 169.254.169.254), or other resources not directly reachable by the attacker. The CPE string cpe:2.3:a:nextlevelbuilder:goclaw:*:*:*:*:*:*:*:* uses a wildcard version field, indicating no patched release has been formally registered in NVD at time of analysis.
RemediationAI
No vendor-released patch has been identified at time of analysis. The sole fix reference is GitHub issue #1199 (https://github.com/nextlevelbuilder/goclaw/issues/1199), which constitutes a public disclosure rather than a tagged patched release; a resolved patch version has not been independently confirmed. As the primary compensating control, disable or restrict network access to the invoke endpoint exposing bytePlusDownloadVideo if BytePlus video download functionality is not operationally required - this eliminates the attack surface but removes the feature entirely. If the feature must remain active, implement a strict allowlist in output.video_url validation that rejects private IP ranges (RFC 1918: 10.x, 172.16-31.x, 192.168.x), loopback addresses, and known cloud metadata addresses (169.254.169.254, fd00:ec2::254), accepting only validated public media CDN hostnames. In AWS or other cloud environments, enforce IMDSv2 (token-required metadata access) to limit SSRF-to-metadata escalation as a defense-in-depth measure. Monitor https://vuldb.com/cve/CVE-2026-15624 and the GitHub repository for a patched release.
OS command injection in nextlevelbuilder GoClaw through version 3.11.3 allows remote attackers to execute arbitrary shel
Missing authentication in GoClaw's Webhook Verification Handler allows unauthenticated remote attackers to interact with
Improper authorization in the GoClaw and GoClaw Lite RPC gateway allows unauthenticated remote attackers to invoke privi
Server-side request forgery in GoClaw through 3.15.0-beta.32 allows authenticated remote attackers to bypass the SSRF bl
Path traversal in GoClaw 3.13.3-beta.3 allows authenticated remote attackers to read or write files outside the intended
Incorrect authorization in GoClaw's WebSocket Approval Endpoint allows low-privileged remote attackers to bypass access
Name resolution bypass in GoClaw's exec approval subsystem allows remote low-privileged attackers to circumvent the bina
Incorrect authorization in nextlevelbuilder GoClaw's WebSocket RPC Handler allows authenticated low-privilege remote att
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows low-privileged remote attackers to
Missing authorization on the Invoke Endpoint in nextlevelbuilder GoClaw up to version 3.13.2 allows low-privileged remot
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.2 allows remote low-privilege authenticated attacke
Improper authorization in GoClaw (nextlevelbuilder/goclaw) up to version 3.11.3 allows a remote low-privileged attacker
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today