EUVD-2026-43614
GHSA-3qh8-qhwr-v2j5
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with low-privilege GoClaw credentials
-
DeliveryIdentify gap in ExecApprovalManager blacklist via public POC
-
ExploitCraft command input bypassing CheckCommand filter
-
ExecutionSubmit crafted command over network
-
ImpactAccess or modify restricted command-scoped data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation completeness
|
| Exploitation Conditions | Exploitation requires low-privilege authenticated access to the GoClaw application (confirmed by PR:L in the CVSS 4.0 vector - unauthenticated exploitation is not supported by available data). The attacker must have network reachability to the GoClaw service (AV:N). The specific exploitable condition is the incomplete blacklist in the ExecApprovalManager.CheckCommand function in internal/tools/exec_approval.go - the attacker must supply an input that is not enumerated in the current blacklist but should be restricted. No user interaction is required (UI:N) and attack complexity is low (AC:L), meaning no race condition or special timing is needed. Exploitation is limited by: the requirement for at least low-level authentication, constrained impact scope (no subsequent-system compromise, VC:L/VI:L/VA:L only), and the niche deployment footprint of the product itself. |
| Impact | The CVSS 4.0 base score of 2.1 is unusually low for a network-accessible, low-complexity, low-privilege flaw, reflecting the constrained impact metrics (VC:L/VI:L/VA:L, no subsequent-system impact). The supplemental E:P metric confirms a publicly available proof-of-concept, which meaningfully elevates practical exploitation likelihood over the raw base score. No CISA KEV listing exists, indicating no confirmed widespread active exploitation at time of analysis. EPSS data was not provided, so probabilistic exploitation likelihood cannot be quantified. The product has a narrow deployment footprint (obscure Go tool, niche use case), which limits aggregate population risk. The combined signal - low CVSS, public POC, no KEV, rare product - characterizes this as a low-priority but not ignorable issue: operators actively running GoClaw 3.11.3 should remediate, but this does not warrant emergency response prioritization. No conflicting signals detected between the CVSS vector and the description. |
| Exploit ScenarioDerived | An authenticated user with low-privilege access to a GoClaw 3.11.3 deployment crafts a command input that falls outside the enumerated blacklist patterns in ExecApprovalManager.CheckCommand, submitting it over the network without requiring any victim interaction. The malformed or obfuscated command bypasses the approval filter, allowing the attacker to issue commands that should have been rejected, potentially reading restricted data or making unauthorized modifications within the scope GoClaw manages. A public proof-of-concept exploit exists at https://github.com/nextlevelbuilder/goclaw/issues/1200, meaning the specific bypass technique is already documented and reproducible. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 14, 2026
GoClaw 3.11.3 by nextlevelbuilder exposes an incomplete blacklist bypass in the ExecApprovalManager.CheckCommand function, allowing authenticated low-privilege remote attackers to circumvent command approval controls enforced in internal/tools/exec_approval.go. The bypass can yield limited confidentiality, integrity, and availability impacts consistent with the information-disclosure tag and the VC:L/VI:L/VA:L CVSS 4.0 impact metrics. No public exploit identified at time of analysis is incorrect here - a public proof-of-concept exploit exists per the referenced GitHub issue, lowering the technical bar for abuse.
RemediationAI
No vendor-released patch has been identified at time of analysis. Operators should monitor the upstream GitHub repository at https://github.com/nextlevelbuilder/goclaw/ and the linked issue at https://github.com/nextlevelbuilder/goclaw/issues/1200 for patch availability. As a compensating control, restrict network access to the GoClaw service to only trusted, minimally privileged users, reducing the pool of potential low-privilege accounts that could reach ExecApprovalManager.CheckCommand - note this does not eliminate the flaw but raises the bar for exploitation. A code-level fix should replace the incomplete blacklist in exec_approval.go with an explicit allowlist of approved commands, which is the architecturally correct remediation; this may require application-level testing to ensure no legitimate commands are unintentionally blocked. Until patched, consider logging and alerting on all CheckCommand invocations to detect bypass attempts.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
GoClaw (CPE: cpe:2.3:a:nextlevelbuilder:goclaw:*:*:*:*:*:*:*:*) is a Go-language tool authored by nextlevelbuilder. The vulnerability resides in the ExecApprovalManager.CheckCommand function within internal/tools/exec_approval.go, which implements a blacklist-based filter to gate command execution approvals. CWE-184 (Incomplete List of Disallowed Inputs) identifies the root cause: blacklist-based validation is structurally fragile because it must anticipate every possible malicious variant; a single omission in the enumerated patterns creates a bypass path. An allowlist (whitelist) approach - explicitly permitting only known-good inputs - is the architecturally sound alternative. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms the function is network-accessible and requires no complex attack setup beyond low-privilege credentials.
Know when Goclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Network-accessible blacklist bypass requiring low-privilege auth; unchanged scope with limited C/I/A impact consistent with information-disclosure tag and CVSS 4.0 VC:L/VI:L/VA:L.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.CheckCommand of the file internal/tools/exec_approval.go. The manipulation results in incomplete blacklist. The attack can be executed remotely. The exploit has been made public and could be used.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Related Vulnerabilities in nextlevelbuilder GoClaw SSRF and Path Traversal Flaws
View all 4OS command injection in nextlevelbuilder GoClaw through version 3.11.3 allows remote attackers to execute arbitrary shel
Missing authentication in GoClaw's Webhook Verification Handler allows unauthenticated remote attackers to interact with
Improper authorization in the GoClaw and GoClaw Lite RPC gateway allows unauthenticated remote attackers to invoke privi
Server-side request forgery in GoClaw through 3.15.0-beta.32 allows authenticated remote attackers to bypass the SSRF bl
Incorrect authorization in GoClaw's WebSocket Approval Endpoint allows low-privileged remote attackers to bypass access
Name resolution bypass in GoClaw's exec approval subsystem allows remote low-privileged attackers to circumvent the bina
Incorrect authorization in nextlevelbuilder GoClaw's WebSocket RPC Handler allows authenticated low-privilege remote att
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows low-privileged remote attackers to
Missing authorization on the Invoke Endpoint in nextlevelbuilder GoClaw up to version 3.13.2 allows low-privileged remot
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.2 allows remote low-privilege authenticated attacke
Exploit-DB