EUVD-2026-43615
GHSA-wf8r-mxfr-xh87
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible path traversal requiring low-privilege authentication; no scope change; partial confidentiality, integrity, and availability impact from arbitrary file read/write.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file internal/providers/acp/tool_bridge.go of the component ACP ToolBridge Workspace Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
AnalysisAI
Path traversal in GoClaw 3.13.3-beta.3 allows authenticated remote attackers to read or write files outside the intended workspace directory by manipulating the path argument to the writeFile function in the ACP ToolBridge Workspace Handler (internal/providers/acp/tool_bridge.go). A proof-of-concept exploit has been publicly disclosed via a GitHub issue, lowering the bar for exploitation. No CISA KEV listing indicates active widespread exploitation has not been confirmed at time of analysis.
Technical ContextAI
GoClaw is a Go-based application by nextlevelbuilder. The vulnerable component is the ACP ToolBridge Workspace Handler, specifically the writeFile function in internal/providers/acp/tool_bridge.go. CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) indicates the function fails to sanitize or canonicalize file paths before performing disk writes, allowing directory traversal sequences such as ../../ to escape the intended workspace root. The affected CPE is cpe:2.3:a:nextlevelbuilder:goclaw:*:*:*:*:*:*:*:*, where the wildcard version field suggests NVD has not bounded the affected range beyond the reported 3.13.3-beta.3, and additional versions may be vulnerable. The 'ACP' naming suggests an Agent Control Plane or similar orchestration layer, which commonly handles workspace file operations and is a plausible attack surface for path traversal.
RemediationAI
No confirmed patched release version is identified in the available data - the vulnerability was reported via GitHub issue https://github.com/nextlevelbuilder/goclaw/issues/1201 and the fix status must be verified directly against the upstream repository at https://github.com/nextlevelbuilder/goclaw/. Upstream fix availability (PR or commit) should be monitored but a tagged patched release has not been independently confirmed. As compensating controls: restrict access to the ACP ToolBridge Workspace Handler endpoint to only trusted, authenticated users with a known-good identity, reducing the pool of potential attackers who meet the PR:L prerequisite. Apply OS-level filesystem isolation (chroot, container namespace, or read-only bind mounts) over the workspace directory so that even a successful traversal cannot reach sensitive system paths - note this requires infrastructure-level changes and does not fix the root cause. Audit recent file-write operations in the workspace for traversal indicators (paths containing ../ sequences). Given this is a beta release, consider whether deployment in sensitive environments is appropriate until a stable, patched version is available.
OS command injection in nextlevelbuilder GoClaw through version 3.11.3 allows remote attackers to execute arbitrary shel
Missing authentication in GoClaw's Webhook Verification Handler allows unauthenticated remote attackers to interact with
Improper authorization in the GoClaw and GoClaw Lite RPC gateway allows unauthenticated remote attackers to invoke privi
Server-side request forgery in GoClaw through 3.15.0-beta.32 allows authenticated remote attackers to bypass the SSRF bl
Incorrect authorization in GoClaw's WebSocket Approval Endpoint allows low-privileged remote attackers to bypass access
Name resolution bypass in GoClaw's exec approval subsystem allows remote low-privileged attackers to circumvent the bina
Incorrect authorization in nextlevelbuilder GoClaw's WebSocket RPC Handler allows authenticated low-privilege remote att
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows low-privileged remote attackers to
Missing authorization on the Invoke Endpoint in nextlevelbuilder GoClaw up to version 3.13.2 allows low-privileged remot
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.2 allows remote low-privilege authenticated attacke
Server-side request forgery in GoClaw 3.13.3-beta.3 enables authenticated remote attackers to manipulate the `output.vid
Improper authorization in GoClaw (nextlevelbuilder/goclaw) up to version 3.11.3 allows a remote low-privileged attacker
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today