Vulnerabilities

TI-2026-14855 CVE-2026-18038 · GHSA-r4xf-9fv3-cx9j

nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure

MEDIUM 57

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00385 Published 2026-07-28 No fix listed CWE-200

TI-2026-13540 CVE-2026-16199 · GHSA-gch8-7366-6m32

nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization

MEDIUM 57

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-07-19 No fix listed CWE-266

TI-2026-13494 CVE-2026-16124 · GHSA-ggmr-9v2r-pqw6

nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery

MEDIUM 57

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00465 Published 2026-07-18 Fixed in 3.15.0-beta.33 CWE-918

TI-2026-13493 CVE-2026-16123 · GHSA-64vj-9h4v-597g

nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization

MEDIUM 57

A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-07-18 No fix listed CWE-862

TI-2026-13492 CVE-2026-16122 · GHSA-g748-qfrv-53vm

nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization

MEDIUM 55

A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2.

CVSS 4.0MEDIUM 4.8 Adjacent network High privileges No interaction EPSS 0.00306 Published 2026-07-18 No fix listed CWE-285

TI-2026-13491 CVE-2026-16121 · GHSA-952r-63wr-g75f

nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization

MEDIUM 57

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-07-18 No fix listed CWE-266

TI-2026-13490 CVE-2026-16120 · GHSA-rqq5-x99m-3pj6

nextlevelbuilder GoClaw exec_approval.go extractBin name resolution

MEDIUM 57

A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00399 Published 2026-07-18 No fix listed CWE-706

TI-2026-13489 CVE-2026-16119 · GHSA-jx43-52cp-c9vc

nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization

MEDIUM 57

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00398 Published 2026-07-18 No fix listed CWE-285

TI-2026-13149 CVE-2026-15627 · GHSA-mmqr-fw76-fv3f

nextlevelbuilder GoClaw tool.go handleNavigate information disclosure

MEDIUM 57

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00419 Published 2026-07-14 No fix listed CWE-200

TI-2026-13148 CVE-2026-15626 · GHSA-wf8r-mxfr-xh87

nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal

MEDIUM 57

A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00425 Published 2026-07-14 No fix listed CWE-22

TI-2026-13147 CVE-2026-15625 · GHSA-3qh8-qhwr-v2j5

nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist

MEDIUM 57

A vulnerability was found in nextlevelbuilder GoClaw 3.11.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00478 Published 2026-07-14 No fix listed CWE-183

TI-2026-13146 CVE-2026-15624 · GHSA-jj94-w7r6-q859

nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery

MEDIUM 57

A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-07-14 No fix listed CWE-918

TI-2026-12401 CVE-2026-14716 · GHSA-46qv-77xg-7vj5

nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization

MEDIUM 57

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.13.0-beta.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00398 Published 2026-07-05 No fix listed CWE-285

TI-2026-09124 CVE-2026-10617 · GHSA-m4rx-8cqf-h494

nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

HIGH 70

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00399 Published 2026-06-02 No fix listed CWE-287

TI-2026-09123 CVE-2026-10616 · GHSA-cq6h-h9c3-mq74

nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization

MEDIUM 57

A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00206 Published 2026-06-02 No fix listed CWE-862

TI-2026-09101 CVE-2026-10583 · GHSA-376c-9hgg-2xx6

nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery

MEDIUM 56

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00227 Published 2026-06-02 No fix listed CWE-918

TI-2026-08957 CVE-2026-10219 · GHSA-6jm8-4fhr-5w64

nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection

HIGH 70

A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0147 Published 2026-06-01 No fix listed CWE-77

TI-2026-08956 CVE-2026-10218 · GHSA-j6m2-hpv6-29c4

nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization

MEDIUM 57

A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0023 Published 2026-06-01 No fix listed CWE-266

TI-2026-08955 CVE-2026-10217 · GHSA-xvg5-76pr-547q

nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management

MEDIUM 57

A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00209 Published 2026-06-01 No fix listed CWE-266

TI-2026-06679 CVE-2026-7596 · GHSA-hgxx-jw5p-hq3x

nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting

MEDIUM 57

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00431 Published 2026-05-01 No fix listed CWE-79

TI-2026-06678 CVE-2026-7595 · GHSA-5p5v-2vmc-r7fm

nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection

MEDIUM 57

A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00242 Published 2026-05-01 No fix listed CWE-74

TI-2026-06595 CVE-2026-7505 · GHSA-p2qq-m885-cm42

nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization

LOW 37

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00381 Published 2026-04-30 Fixed in 3.9.0 CWE-266

Vulnerabilities

Filters