Goclaw
This hub aggregates every CVE we track for Goclaw, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.
20
CVEs tracked
0
Critical
3
High
0
In CISA KEV
Severity distribution
MEDIUM17HIGH3
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
6
13
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Goclaw.
- CVE-2026-18038nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure4.3
- CVE-2026-16199nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization6.3
- CVE-2026-16124nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery6.3
- CVE-2026-16123nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization6.3
- CVE-2026-16122nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization4.3
- CVE-2026-16121nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization6.3
- CVE-2026-16120nextlevelbuilder GoClaw exec_approval.go extractBin name resolution6.3
- CVE-2026-16119nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization6.3
- CVE-2026-15627nextlevelbuilder GoClaw tool.go handleNavigate information disclosure4.3
- CVE-2026-15626nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal6.3
- CVE-2026-15625nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist6.3
- CVE-2026-15624nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery6.3
- CVE-2026-14716nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization6.3
- CVE-2026-10617nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication7.3
- CVE-2026-10616nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization4.3
Product normalization is registry-driven with AI assist and human review. How it works