EUVD-2026-43614
GHSA-3qh8-qhwr-v2j5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible blacklist bypass requiring low-privilege auth; unchanged scope with limited C/I/A impact consistent with information-disclosure tag and CVSS 4.0 VC:L/VI:L/VA:L.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.CheckCommand of the file internal/tools/exec_approval.go. The manipulation results in incomplete blacklist. The attack can be executed remotely. The exploit has been made public and could be used.
AnalysisAI
GoClaw 3.11.3 by nextlevelbuilder exposes an incomplete blacklist bypass in the ExecApprovalManager.CheckCommand function, allowing authenticated low-privilege remote attackers to circumvent command approval controls enforced in internal/tools/exec_approval.go. The bypass can yield limited confidentiality, integrity, and availability impacts consistent with the information-disclosure tag and the VC:L/VI:L/VA:L CVSS 4.0 impact metrics. No public exploit identified at time of analysis is incorrect here - a public proof-of-concept exploit exists per the referenced GitHub issue, lowering the technical bar for abuse.
Technical ContextAI
GoClaw (CPE: cpe:2.3:a:nextlevelbuilder:goclaw:*:*:*:*:*:*:*:*) is a Go-language tool authored by nextlevelbuilder. The vulnerability resides in the ExecApprovalManager.CheckCommand function within internal/tools/exec_approval.go, which implements a blacklist-based filter to gate command execution approvals. CWE-184 (Incomplete List of Disallowed Inputs) identifies the root cause: blacklist-based validation is structurally fragile because it must anticipate every possible malicious variant; a single omission in the enumerated patterns creates a bypass path. An allowlist (whitelist) approach - explicitly permitting only known-good inputs - is the architecturally sound alternative. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms the function is network-accessible and requires no complex attack setup beyond low-privilege credentials.
RemediationAI
No vendor-released patch has been identified at time of analysis. Operators should monitor the upstream GitHub repository at https://github.com/nextlevelbuilder/goclaw/ and the linked issue at https://github.com/nextlevelbuilder/goclaw/issues/1200 for patch availability. As a compensating control, restrict network access to the GoClaw service to only trusted, minimally privileged users, reducing the pool of potential low-privilege accounts that could reach ExecApprovalManager.CheckCommand - note this does not eliminate the flaw but raises the bar for exploitation. A code-level fix should replace the incomplete blacklist in exec_approval.go with an explicit allowlist of approved commands, which is the architecturally correct remediation; this may require application-level testing to ensure no legitimate commands are unintentionally blocked. Until patched, consider logging and alerting on all CheckCommand invocations to detect bypass attempts.
OS command injection in nextlevelbuilder GoClaw through version 3.11.3 allows remote attackers to execute arbitrary shel
Missing authentication in GoClaw's Webhook Verification Handler allows unauthenticated remote attackers to interact with
Improper authorization in the GoClaw and GoClaw Lite RPC gateway allows unauthenticated remote attackers to invoke privi
Server-side request forgery in GoClaw through 3.15.0-beta.32 allows authenticated remote attackers to bypass the SSRF bl
Path traversal in GoClaw 3.13.3-beta.3 allows authenticated remote attackers to read or write files outside the intended
Incorrect authorization in GoClaw's WebSocket Approval Endpoint allows low-privileged remote attackers to bypass access
Name resolution bypass in GoClaw's exec approval subsystem allows remote low-privileged attackers to circumvent the bina
Incorrect authorization in nextlevelbuilder GoClaw's WebSocket RPC Handler allows authenticated low-privilege remote att
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows low-privileged remote attackers to
Missing authorization on the Invoke Endpoint in nextlevelbuilder GoClaw up to version 3.13.2 allows low-privileged remot
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.2 allows remote low-privilege authenticated attacke
Server-side request forgery in GoClaw 3.13.3-beta.3 enables authenticated remote attackers to manipulate the `output.vid
Same weakness CWE-184 – Incomplete List of Disallowed Inputs
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today