12
CVEs
0
Critical
0
High
0
KEV
12
PoC
0
Unpatched C/H
8.3%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
0
LOW
12
Monthly CVE Trend
Affected Products (3)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-16124 | Server-side request forgery in GoClaw through 3.15.0-beta.32 allows authenticated remote attackers to bypass the SSRF blocklist in the web_fetch component by targeting IP addresses in the RFC 2544 benchmarking range (198.18.0.0/15) and the reserved-for-future-use range (240.0.0.0/4), which the `isPrivateIP` function in `internal/tools/web_shared.go` failed to block. A publicly available proof-of-concept exploit exists (GitHub issue #1218, corroborated by E:P in the CVSS 4.0 vector), though no CISA KEV entry confirms active widespread exploitation. The bypass is constrained by a PR:L requirement and by the rarity of infrastructure that routes these non-standard ranges to reachable internal services. | LOW | 2.1 | 0.3% | 31 |
PoC
|
| CVE-2026-15626 | Path traversal in GoClaw 3.13.3-beta.3 allows authenticated remote attackers to read or write files outside the intended workspace directory by manipulating the path argument to the `writeFile` function in the ACP ToolBridge Workspace Handler (`internal/providers/acp/tool_bridge.go`). A proof-of-concept exploit has been publicly disclosed via a GitHub issue, lowering the bar for exploitation. No CISA KEV listing indicates active widespread exploitation has not been confirmed at time of analysis. | LOW | 2.1 | 0.3% | 31 |
PoC
No patch
|
| CVE-2026-16119 | Incorrect authorization in GoClaw's WebSocket Approval Endpoint allows low-privileged remote attackers to bypass access controls in the RequestApproval function, potentially approving privileged operations without proper authorization. All versions up to and including 3.13.2 of nextlevelbuilder/goclaw are affected. A public exploit has been disclosed via GitHub, though no CISA KEV listing confirms active exploitation at this time. | LOW | 2.1 | 0.3% | 31 |
PoC
No patch
|
| CVE-2026-14716 | Incorrect authorization in nextlevelbuilder GoClaw's WebSocket RPC Handler allows authenticated low-privilege remote attackers to bypass access controls on restricted methods. Affects all versions up to and including 3.13.0-beta.2. No public exploit identified as actively exploited (not in CISA KEV), but a publicly available proof-of-concept exists, lowering the barrier for exploitation against any exposed GoClaw deployment. | LOW | 2.1 | 0.2% | 31 |
PoC
No patch
|
| CVE-2026-16120 | Name resolution bypass in GoClaw's exec approval subsystem allows remote low-privileged attackers to circumvent the binary execution allowlist. Affecting all versions up to and including 3.13.3-beta.3, the flaw resides in the matchesAllowlist and extractBin functions within internal/tools/exec_approval.go, where crafted input causes the allowlist check to resolve a name or reference incorrectly, permitting unauthorized binary execution. A publicly disclosed proof-of-concept exploit exists (GitHub issue #1213); no CISA KEV listing is present, indicating no confirmed widespread active exploitation at time of analysis. | LOW | 2.1 | 0.2% | 31 |
PoC
No patch
|
| CVE-2026-15624 | Server-side request forgery in GoClaw 3.13.3-beta.3 enables authenticated remote attackers to manipulate the `output.video_url` parameter within the `bytePlusDownloadVideo` function, coercing the server into issuing HTTP requests to attacker-controlled destinations including internal network resources. The flaw resides in `internal/tools/create_video_byteplus.go` at the invoke endpoint. A proof-of-concept exploit has been publicly disclosed via GitHub issue #1199; however, no CISA KEV listing confirms mass active exploitation, and the CVSS 4.0 score of 2.1 reflects the low-privilege authentication barrier and limited per-request impact scope. | LOW | 2.1 | 0.2% | 31 |
PoC
No patch
|
| CVE-2026-16121 | Improper authorization in nextlevelbuilder GoClaw up to version 3.13.2 allows remote low-privilege authenticated attackers to bypass binary execution controls by manipulating the isSafeBin function in internal/tools/exec_approval.go. The authorization logic flaw permits approval of binaries that should be restricted, with potential for unauthorized code execution within the tool's operational context - particularly impactful in pipeline or build automation deployments. A publicly available proof-of-concept exists (CVSS 4.0 E:P); the vulnerability is not listed in CISA KEV, indicating no confirmed widespread active exploitation at time of analysis. | LOW | 2.1 | 0.2% | 31 |
PoC
No patch
|
| CVE-2026-16123 | Missing authorization on the Invoke Endpoint in nextlevelbuilder GoClaw up to version 3.13.2 allows low-privileged remote attackers to invoke tool functionality without proper permission checks. The flaw resides in the `ToolsInvokeHandler.ServeHTTP` function within `internal/http/tools_invoke.go`, where authorization is absent rather than bypassed cryptographically. A public proof-of-concept exploit is available via GitHub, lowering the bar for exploitation; however, this CVE is not currently listed in the CISA KEV catalog, so confirmed active exploitation has not been established at time of analysis. | LOW | 2.1 | 0.2% | 31 |
PoC
No patch
|
| CVE-2026-16199 | Improper authorization in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows low-privileged remote attackers to bypass access controls via manipulation of the ExecTool.Execute function in credentialed_exec.go. The CVSS 4.0 vector confirms network-accessible exploitation requiring only low-privilege credentials, with limited but confirmed confidentiality, integrity, and availability impact on the vulnerable system. A publicly available proof-of-concept exploit exists (tracked in GitHub issue #1215), though the overall CVSS 4.0 base score of 2.1 reflects constrained real-world impact. | LOW | 2.1 | 0.2% | 31 |
PoC
No patch
|
| CVE-2026-15625 | GoClaw 3.11.3 by nextlevelbuilder exposes an incomplete blacklist bypass in the ExecApprovalManager.CheckCommand function, allowing authenticated low-privilege remote attackers to circumvent command approval controls enforced in internal/tools/exec_approval.go. The bypass can yield limited confidentiality, integrity, and availability impacts consistent with the information-disclosure tag and the VC:L/VI:L/VA:L CVSS 4.0 impact metrics. No public exploit identified at time of analysis is incorrect here - a public proof-of-concept exploit exists per the referenced GitHub issue, lowering the technical bar for abuse. | LOW | 2.1 | 0.3% | 30 |
PoC
No patch
|
| CVE-2026-15627 | Information disclosure in nextlevelbuilder GoClaw up to version 3.13.3-beta.3 allows remote low-privileged attackers to extract sensitive data by manipulating the `args.targetUrl` argument passed to the `handleNavigate` function in `pkg/browser/tool.go`. A public proof-of-concept exploit exists and is referenced via GitHub issue #1207, elevating the practical risk beyond the moderate CVSS 4.0 score of 5.3. No confirmed patched release has been identified at the time of analysis, leaving all known versions of the product exposed. | LOW | 2.1 | 0.2% | 30 |
PoC
No patch
|
| CVE-2026-16122 | Incorrect authorization in GoClaw's execution approval module (versions up to 3.13.2) allows a high-privileged attacker on an adjacent network to bypass the binary execution allowlist enforced by the extractBin, RequestApproval, and matchesAllowlist functions. Despite the Authentication Bypass tag, exploitation is constrained to adjacent-network, high-privilege contexts per the CVSS 4.0 vector, limiting opportunistic abuse. A public proof-of-concept is available via the project's GitHub issue tracker, making exploitation accessible to any attacker who already meets the privilege and network prerequisites. | LOW | 1.9 | 0.2% | 30 |
PoC
No patch
|