EUVD-2026-45377
GHSA-rqq5-x99m-3pj6
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable allowlist bypass requiring low-privilege authentication; unchanged scope with limited confidentiality, integrity, and availability impact per description and CVSS 4.0 alignment.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/exec_approval.go. Executing a manipulation can lead to incorrectly-resolved name. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
AnalysisAI
Name resolution bypass in GoClaw's exec approval subsystem allows remote low-privileged attackers to circumvent the binary execution allowlist. Affecting all versions up to and including 3.13.3-beta.3, the flaw resides in the matchesAllowlist and extractBin functions within internal/tools/exec_approval.go, where crafted input causes the allowlist check to resolve a name or reference incorrectly, permitting unauthorized binary execution. A publicly disclosed proof-of-concept exploit exists (GitHub issue #1213); no CISA KEV listing is present, indicating no confirmed widespread active exploitation at time of analysis.
Technical ContextAI
GoClaw (CPE: cpe:2.3:a:nextlevelbuilder:goclaw:*:*:*:*:*:*:*:*) is a Go-language tool by nextlevelbuilder that implements an execution approval mechanism gating which binaries may be run. The vulnerable logic lives in internal/tools/exec_approval.go, specifically the matchesAllowlist function that validates submitted binary names against an allowlist and extractBin that parses the binary name from a request. CWE-706 (Use of Incorrectly-Resolved Name or Reference) describes the root cause: the software resolves a name through a path or method that yields a different resource than intended, allowing an attacker to supply a crafted name that the allowlist check evaluates as permitted but which actually maps to a different, unauthorized binary. This class of flaw is common in allowlist or sandbox bypass scenarios where normalization (e.g., path traversal sequences, symlink resolution, or encoding differences) is inconsistent between the validation step and the execution step.
RemediationAI
No vendor-released patched version has been independently confirmed at time of analysis; the fix status should be monitored via the upstream GitHub repository at https://github.com/nextlevelbuilder/goclaw/ and issue #1213 (https://github.com/nextlevelbuilder/goclaw/issues/1213). As a compensating control, restrict access to GoClaw's execution approval interface to the minimum necessary set of authenticated principals, reducing the pool of accounts that can trigger the vulnerable matchesAllowlist/extractBin code path. Additionally, enforce OS-level controls (e.g., Linux seccomp profiles, AppArmor/SELinux policies, or container capability restrictions) on the process running GoClaw to limit which binaries can actually be executed even if the allowlist is bypassed. Audit logs of all execution approval requests should be reviewed for anomalous binary names containing path traversal sequences, encoding variations, or unexpected delimiters. Check VulDB entry https://vuldb.com/vuln/379829 for patch version confirmation when available.
OS command injection in nextlevelbuilder GoClaw through version 3.11.3 allows remote attackers to execute arbitrary shel
Missing authentication in GoClaw's Webhook Verification Handler allows unauthenticated remote attackers to interact with
Improper authorization in the GoClaw and GoClaw Lite RPC gateway allows unauthenticated remote attackers to invoke privi
Server-side request forgery in GoClaw through 3.15.0-beta.32 allows authenticated remote attackers to bypass the SSRF bl
Path traversal in GoClaw 3.13.3-beta.3 allows authenticated remote attackers to read or write files outside the intended
Incorrect authorization in GoClaw's WebSocket Approval Endpoint allows low-privileged remote attackers to bypass access
Incorrect authorization in nextlevelbuilder GoClaw's WebSocket RPC Handler allows authenticated low-privilege remote att
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows low-privileged remote attackers to
Missing authorization on the Invoke Endpoint in nextlevelbuilder GoClaw up to version 3.13.2 allows low-privileged remot
Improper authorization in nextlevelbuilder GoClaw up to version 3.13.2 allows remote low-privilege authenticated attacke
Server-side request forgery in GoClaw 3.13.3-beta.3 enables authenticated remote attackers to manipulate the `output.vid
Improper authorization in GoClaw (nextlevelbuilder/goclaw) up to version 3.11.3 allows a remote low-privileged attacker
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today